Senior Cybersecurity Lab Engineer

UL Solutions; Bengaluru; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

UL Solutions seeks an experienced cybersecurity professional to support CRA, Product Security, and Cybersecurity Lab services. The role combines cybersecurity assessment, product security testing, regulatory compliance evaluation, and laboratory operations across CRA, IoT Security, and Medical Device Cybersecurity.

The candidate will develop test plans, lead lab operations, and support service expansion while contributing to ISO/IEC 17025 processes and technical documentation reviews.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information security, or a related field is required.
• 7+ years of experience in cybersecurity, product security, security testing, assessment, or related disciplines is required.
• Strong knowledge of network security, secure software development, vulnerability management, risk assessment, authentication, authorization, and cryptography is required.
• Experience with Linux and scripting (Python, Bash, or PowerShell) is required.
• Experience with firmware analysis, reverse engineering, hardware security testing is preferred.

Responsibilities

• Conduct cybersecurity assessments, gap analyses, and technical documentation reviews against CRA and related standards.
• Perform vulnerability assessments, penetration testing, threat modeling, and product security evaluations.
• Review risk assessments, SBOMs, SDLC evidence, and vulnerability management processes.
• Develop and execute cybersecurity test plans, test procedures, and technical reports.
• Lead cybersecurity laboratory operations, test method development, validation activities, and quality processes.
• Lead ISO/IEC 17025 accreditation activities, internal audits, and laboratory readiness initiatives.
• Participate in customer discussions, workshops, assessments, and project delivery.
• Provide technical leadership and mentoring for engineering teams.

Skills

Cybersecurity

Product Security

Security Testing

Regulatory Compliance

Lab Operations

Vulnerability Management

Threat Modeling

SSDLC

Technical Documentation

Education

Bachelor's degree in Cybersecurity, CS, Info Sec, or related field

Tools

Burp Suite

Nessus

Nmap

Wireshark

tcpdump

Defensics

Checkmarx

Black Duck

Coverity

OWASP ZAP

Metasploit

Job description

We are seeking an experienced cybersecurity professional to support CRA, Product Security, and Cybersecurity Lab services. The role combines cybersecurity assessment, product security testing, regulatory compliance evaluation, and laboratory operations. The successful candidate will support customer projects, cybersecurity testing activities, ISO/IEC 17025 laboratory processes, and service expansion in CRA, IoT Security, and Medical Device Cybersecurity.

Required

• Bachelors degree in Cybersecurity, Computer Science, Information Security, Electrical/Electronic Engineering, or a related field.
• 7+ years of experience in cybersecurity, product security, security testing, assessment, or related disciplines.
• Strong understanding of:
  • Network security and communication protocols
  • Secure software development practices and principles
  • Vulnerability management and risk assessment
  • Authentication, authorization, and cryptography
  • IoT and embedded systems security
• Experience in Linux and scripting languages (Python, Bash, or PowerShell).
• Familiarity with firmware analysis, reverse engineering, and hardware security testing.
• Hands-on experience with:
  • Vulnerability Assessment
  • Penetration Testing
  • Fuzz Testing
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Software Composition Analysis (SCA)
  • Threat Modeling / TARA
  • Security Risk Assessment
  • Secure Software Development Lifecycle (SSDLC)
  • Product Security Evaluation
  • Technical Documentation Review
• Experience with one or more of the following standards or regulations:
  • CRA
  • EN 18031
  • ETSI EN 303 645
  • IEC 62443
  • ISO/SAE 21434
• Experience developing test plans, test procedures, and cybersecurity assessment reports.
• Experience supporting cybersecurity laboratory operations.

Preferred

• Experience with EN 18031 and ETSI EN 303 645 test method development, technical evaluation, or reporting for connected or radio-enabled products.
• Strong understanding of of OWASP Top 10, OWASP IoT Top 10, CWE, CVE, MITRE ATT&CK, secure coding principles, cryptography fundamentals, Authentication and authorization
• Experience with ISO/IEC 17025 accredited laboratories, including method validation and verification, internal audits, accreditation preparation, quality management systems, or laboratory operations.
• Knowledge of embedded Linux, RTOS, bootloaders, secure boot, firmware updates, hardware security, and Trusted Platform Module (TPM).
• Experience using security testing tools such as Burp Suite, Nessus, Nmap, Wireshark, tcpdump, Defensics, Checkmarx, Black Duck, Coverity, OWASP ZAP, or Metasploit.
• Relevant certifications such as OSCP, OSWE, CISSP, CompTIA Security+, CompTIA CySA+, or ISA/IEC 62443 Cybersecurity Expert.

• Conduct cybersecurity assessments, gap analyses, and technical documentation reviews against CRA and related cybersecurity standards.
• Perform vulnerability assessments, penetration testing, threat modeling, and product security evaluations.
• Review cybersecurity risk assessments, SBOMs, secure development lifecycle (SDLC) evidence, and vulnerability management processes.
• Develop and execute cybersecurity test plans, test procedures, and technical reports.
• Lead cybersecurity laboratory operations, test method development, validation activities, and quality processes.
• Lead ISO/IEC 17025 accreditation activities, internal audits, and laboratory readiness initiatives.
• Participate in customer technical discussions, workshops, assessments, and project delivery activities.
• Provide technical leadership, mentoring, and cybersecurity competency development for engineering teams.
• Support proposal development, service scoping, and pre-sales activities.
• Contribute to service development in CRA, IoT device security, and medical device cybersecurity.