OT Cybersecurity Engineer

Bosch Group; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Bosch Global Software Technologies Private Limited is seeking a highly technical OT Cybersecurity Engineer to secure Battery Energy Storage Systems (BESS). You will evaluate security tools, harden systems, and implement the cybersecurity stack required to protect critical infrastructure in alignment with IEC 62443 standards.

Hands-on experience with OT security, vulnerability management, IAM, MFA/RBAC, and security monitoring is essential.

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, Engineering or related field.
• Hands-on experience configuring Linux systems, security agents and controls.
• Experience with vulnerability assessment tools and OT security testing.
• Knowledge of OT protocols and industrial networks (MQTT, Modbus, ZMQ).
• Familiarity with IEC 62443 and related security standards.

Responsibilities

• Evaluate OT threat detection tools and lead PoCs for platforms (open-source or commercial).
• Hardening across hardware, VMs, software components and network devices.
• Configure IAM (Authentik) for OT networks; enforce MFA and RBAC.
• Perform OT vulnerability scanning and coordinate remediation with engineering.
• Maintain security monitoring and contribute to incident response plans.

Skills

OT cybersecurity

Linux

Security tooling

Python

Ansible

Problem solving

Education

Bachelor's degree in Computer Science, Cyber Security, Engineering

Tools

Tenable

Security Onion

Authentik

Linux

Ansible

Job description

Company Description

Bosch Global Software Technologies Private Limited is a 100% owned subsidiary of Robert Bosch GmbH, one of the world's leading global supplier of technology and services, offering end-to-end Engineering, IT and Business Solutions. With over 27,000+ associates, it's the largest software development center of Bosch, outside Germany, indicating that it is the Technology Powerhouse of Bosch in India with a global footprint and presence in the US, Europe and the Asia Pacific region.

Job Description

Roles & Responsibilities

Seeking a highly technical, hands-on OT Cybersecurity Engineer to secure customers' Battery Energy Storage Systems (BESS). The candidate will be directly responsible for evaluating security tools, hardening systems, and implementing the cybersecurity stack required to protect critical infrastructure in alignment with the IEC 62443 standard.

Qualifications

• OT Threat Detection & Tool Evaluation: Actively evaluate, test, and deploy OT specific threat intelligence and network security monitoring tools. You will lead Proof of Concepts for commercial platforms as well as evaluate open-source alternatives like Security Onion.
• 2. Comprehensive System Hardening: Execute hands-on security hardening across all layers including physical devices, virtual environments, software components, and network devices to mitigate risks and enforce secure configurations.
• 3. Identity & Access Management (IAM): Configure IAM solutions (e.g., Authentik) for OT networks. Enforce Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and strict authorization policies.
• 4. Vulnerability Management: Perform OT-safe vulnerability scanning (e.g., Tenable). Prioritize and remediate vulnerabilities in collaboration with engineering teams.
• 5. Security Monitoring: Maintain security monitoring platforms to support future Incident Response and recovery plans being built for OT environments. Build, evaluate, and integrate future security tools to support the broader incident handling capabilities.

Qualifications and Experience

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related field.
• Hands-on experience configuring Linux operating systems, deploying security agents, and executing technical security controls.
• Hands-on experience with vulnerability assessment tools, penetration testing, and security analysis tools specific to IC environments.
• Foundational knowledge of networking protocols, firewalls, VPNs, IDS/IPS, and other network security concepts, with a strong understanding of network segmentation and the Purdue Model applied to OT environments.
• Deep understanding of how industrial and application messaging protocols function, specifically MQTT, Modbus, and ZMQ.
• Familiarity with standards like NERC CIP and IEC 62443, coupled with the ability to translate a compliance requirement directly into a technical firewall rule, IAM policy, or OS configuration.
• Familiarity with scripting and automation tools, specifically Python and Ansible, to streamline configurations, deploy tools, and parse data.
• Strong analytical and problem-solving skills with an ability to think critically and innovatively in complex cyber security scenarios.
• Legal Entity: Bosch Global Software Technologies Private Limited