Senior Embedded Cybersecurity Analyst

Quest Global; Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Quest Global is seeking an Embedded Cybersecurity Analyst with 8+ years of software development experience for multitasking embedded systems running Linux, VxWorks/RTOS, and Windows. This role focuses on secure development practices and SDL compliance.

You will mentor engineering teams, guide threat modeling, and oversee analysis using SCA, SAST, and other security tools to reduce risk in product releases and third-party components.

Qualifications

• 8+ years in software development for multitasking embedded systems.
• Experience with Linux, VxWorks/RTOS, and Windows.
• Strong C/C++ programming with OO design.
• Familiar with SDL and IEC 62443-4-2 cybersecurity standard.

Responsibilities

• Ensure SDL and cybersecurity standards for each release.
• Mentor engineering teams on architecture and threat modeling.
• Evaluate and resolve cybersecurity issues and technical debt in 3rd-party packages.
• Utilize static and dynamic analysis tools and SCA for code security.

Skills

C/C++ programming

Embedded systems

Linux OS

VxWorks/RTOS

Windows OS

Cybersecurity basics

Tools

Coverity

SQuORE

Valgrind

CppCheck

Black Duck

Black Duck Hub

Job description

Job Requirements

Embedded Cybersecurity Analyst 8+ years of experience in leading and supporting the secure development

Job Requirements

Embedded Cybersecurity Analyst 8+ years of experience in leading and supporting the secure development

Key Responsibilities

• Work with Cybersecurity Advisor/Coach to ensure each release compliance with Secure Development Lifecycle (SDL), cybersecurity standards and regulatory compliance
• Mentor engineering teams and provide guidance in architecting, designing and threat model during development cycle
• Support to evaluate, track and resolution of product and runtime cybersecurity issues and related technical debt in 3rd party package
• Manage and utilize static code analysis, dynamic analysis, and Software Composition Analysis (SCA) tools, including Coverity, SQuORE, Valgrind, CppCheck, Black Duck Binary Analysis (BDBA), and Black Duck Hub

Work Experience

• 8+ years of experience in software development for multitasking embedded systems running on Linux, VxWorks/RTOS, and Windows.
• Strong programming skills in C/C++, including object-oriented design and development
• Good knowledge in IEC 62443-4-2 cybersecurity standard
• Familiarity with open-source software (OSS), Git, GitHub, Debian GNU/Linux, and Ubuntu.
• Familiarity with Software Composition Analysis (SCA), Static Code Analysis and Static Application Security Testing (SAST), Fuzz testing