Senior Cyber Security Specialist

ABB; Bengaluru; In loco; INR 2.500.000 - 4.500.000; Tempo pieno

Descrizione del lavoro

ABB is seeking a Senior Cybersecurity Specialist in Bengaluru, India, to lead secure software development lifecycle practices and drive secure architecture across digital products. You will own software supply chain security, container/security testing, and vulnerability disclosure coordination for motion service solutions.

Role requires deep security engineering expertise, risk assessment, and collaboration with engineering teams from concept to implementation in a production environment.

Competenze

• 10+ years of experience across software engineering, application security, security engineering, or product security.
• Deep knowledge of Secure SDLC, Secure by Design/Default, OWASP, ISO 27001, NIST SP 800-53, IEC 62443-4-2.
• Experience with secure design reviews, reference architectures, and risk assessments.
• Proficiency in STRIDE, DREAD, PASTA, MITRE ATT&CK; using IriusRisk or Threat Modeling Tool.
• Hands-on CI/CD security: SAST, SCA, DAST, SBOM; tools include SonarQube, WizCode, Burp Suite.
• Cloud-native security with Azure/AWS/GCP; containers and Kubernetes security controls.
• Strong knowledge of OpenID Connect, OAuth 2.0, SAML, mTLS; TLS/AES/RSA cryptography.
• Vulnerability triaging, disclosure, and governance aligned to ISO 27005, NIST SP 800-37, GDPR.
• Bachelor’s degree holder with ability to influence engineering and secure coding practices.

Mansioni

• Own the secure SDLC and guide product teams to implement security practices at each software stage.
• Own software supply chain security across open-source packages, container images, and build tools.
• Own first-party software security including code/container scanning, CI tests, external pentests, and SBOMs.
• Run and improve the vulnerability disclosure program, triage reports, and maintain submission quality.
• Partner with engineering teams to conduct security design reviews and define secure architectures.

Conoscenze

Secure SDLC

Security Architecture

Threat Modeling

DevSecOps

Cloud Security

Identity & Cryptography

Vulnerability Management

Security Leadership

Formazione

Bachelor's degree in CS or related field

Strumenti

SonarQube

WizCode

Black Duck

Nmap

Nessus

Qualys

Burp Suite

Dependency-Track

IriusRisk

Threat Modeling Tool

Kubernetes

Azure

AWS

GCP

Descrizione del lavoro

At ABB, we help industries run leaner and cleaner and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.

This Position reports to: R&D Team Lead

Your role and responsibilities :

We are seeking a skilled Senior Cybersecurity Specialist with deep knowledge of product security, secure software development, and cybersecurity engineering to join our team. You will manage the design, implementation, and continuous improvement of cybersecurity controls for digital products and solutions, ensuring they are secure, resilient, and compliant with applicable cybersecurity standards and regulations. This role requires a unique combination of security engineering knowledge, risk management, threat modeling, and software development lifecycle security to deliver secure, scalable, and maintainable products in production environments.

The work model for the role is: This role is contributing to the Motion Business Service Division in Bangalore India.

You will be mainly accountable for:

• Own the secure software development lifecycle and guide the product team to implement the security practices at different stages of the software development process.
• Own software supply chain security, including defenses against risks from open-source packages, third-party binaries, container base images, build tools, and other software dependencies.
• Own first-party software security, including code and container scanning, automated security testing in CI, external penetration tests, and the integrity and provenance of software we build and publish.
• Own and run the responsible vulnerability disclosure program, including triaging external reports, maintaining submission quality standards, and scaling the review process.
• Partner with engineering teams from concept through implementation to conduct security design reviews, define secure architectures, and ensure security best practices are followed.

Qualifications for the role:

• Product Security & Secure SDLC: 10+ years of experience across software engineering, application security, security engineering, or product security, with deep knowledge of Secure SDLC, Secure by Design, Secure by Default, OWASP, ISO 27001, NIST SP 800-53, and IEC 62443-4-2 standards.
• Security Architecture & Risk Assessment: Experience in conducting secure design and architecture reviews, developing reusable security reference architectures and security blueprints aligned with Microsoft Security Baselines and Bow-Tie models, and performing product security risk assessments.
• Threat Modeling & Security Analysis: Proficiency in STRIDE, DREAD, PASTA, and MITRE ATT&CK frameworks, with experience using tools such as IriusRisk and Microsoft Threat Modeling Tool to identify threats, assess risks, and define mitigations.
• DevSecOps & Application Security: Practical experience integrating security into CI/CD pipelines, including SAST (SonarQube, WizCode), SCA (Black Duck Hub), DAST and vulnerability scanning (Nmap, Nessus, Qualys, Burp Suite), and SBOM generation and management using OWASP Dependency-Track.
• Cloud & Platform Security: Deep understanding of cloud-native architectures, microservices, Kubernetes, containers, and multi-tenant SaaS environments, with practical knowledge of security controls across Microsoft Azure, AWS, and GCP.
• Identity, Authentication & Cryptography: Solid knowledge of authentication and authorization protocols, including OpenID Connect, OAuth 2.0, SAML, and mTLS, along with cryptographic protocols and algorithms such as TLS, AES, RSA, ChaCha20-Poly1305, SHA, ECC, and Diffie-Hellman key exchange.
• Vulnerability Management & Governance: Proven experience in vulnerability triaging, coordinated vulnerability disclosure, product risk remediation, and GRC activities aligned with ISO 27005, NIST SP 800-37, SOX, GDPR, the Cyber Resilience Act (CRA), and IEC 62443.
• Leadership, Collaboration & Security Enablement: Bachelor's degree in Computer Science or a related field, with demonstrated ability to influence engineering and product leadership, define security policies and secure coding standards, deliver security awareness and secure coding training, and communicate technical risks effectively to executive stakeholders.

More about us :

ABB Motion Services serve customers around the globe with innovative services to maximize performance, uptime and energy efficiency throughout the lifetime of electrical motion solutions. Electrical motion is applied everywhere in industries, cities, infrastructure and transportation and is a cornerstone of the energy revolution. Our people and culture are the foundation of our success. We drive innovations through digitalization and make the difference for our customers and partners every day. ABB Motion keeps the world turning, while saving energy every day. Building a cleaner, smarter future takes all kinds of minds: the curious, the courageous, and the creative. We welcome people from all backgrounds and experiences.