Senior Engineer - CyberSecurity

Eaton Corporation; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Eaton Corporation is seeking a Senior Cybersecurity Engineer to join a global team driving a Security by Design approach for Eaton products and solutions. You will collaborate with DevSecOps to integrate cybersecurity across product development, conduct vulnerability testing on IoT and embedded systems, and lead threat modeling with cross-functional teams to ensure secure design and implementation.

The role emphasizes hands-on security guidance, ongoing threat monitoring, and facilitation of

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Electronics or Electrical Engineering.

Responsibilities

• Drive cybersecurity integration, deployment and monitoring in Eaton products.
• Perform Vulnerability Assessment & Penetration Testing across IoT, embedded systems, web/mobile apps and solutions.
• Lead Threat Modeling and Risk Assessment with product teams from design to development.
• Provide hands-on guidance to implement security features in line with standards.
• Educate developers and testers on cybersecurity practices and threat awareness.
• Monitor evolving threat landscape and continuously improve Eaton’s cybersecurity requirements and processes.
• Work with DevSecOps to enable CI/CD security automation (SAST, SCA) in Agile teams.

Skills

Secure SDLC

Penetration Testing

Threat Modeling

DevSecOps

Cloud security

Embedded security

Cryptography

Security protocols

Education

Bachelor’s or Master’s in Computer Science or Electrical Engineering

Tools

Nessus

Burp Suite

Defensics

Black Duck

Kali Linux

Threat Modeler

Azure Security Toolkit

CrowdStrike

Invicti

Coverity

Job description

What you’ll do:

The Senior Cybersecurity Engineer will be part of a global team of security experts driving ‘Security by Design’ philosophy in Eaton product and solutions.

Senior Cybersecurity Engineer will be part of a global team of Cybersecurity experts driving cybersecurity for Eaton Products.

He/she will be responsible for:

• A. Working closely with DevSecOps project teams to drive cybersecurity integration, deployment and monitoring in Eaton products.
• B. Performing Vulnerability Assessment & Penetration Testing on existing and upcoming Eaton products and solutions spanning a wide range of technologies including IoT devices, systems & solutions, web applications, mobile applications, thick clients, wireless devices, embedded systems deployed across industries such as electrical, vehicle, eMobility, hydraulics and aerospace.
• C. Driving Threat Modeling and Risk Assessment exercise with product teams early in the design and development phase to identify applicable cybersecurity requirements, in line with various cybersecurity standards.
• D. Providing hands-on guidance to product teams as they implement complex cybersecurity features and requirements in their products, in line with various cybersecurity standards.
• E. Evangelizing and providing technical security trainings to software developers and test engineers across the organization and evangelizing the importance of cybersecurity in other functions like product / project management & sales /services.
• F. Monitoring evolving threat landscape, cybersecurity technologies, standards, frameworks and drive continuous improvement in Eaton’s cybersecurity requirements, frameworks and processes.
• G. Working with DevSecOps project teams, to provide continuous threat modeling, risk assessment, SAST, SCA and other automated tool runs, in CI/CD pipelines across scrum teams doing product development in Agile mode.

Qualifications:

• Bachelor’s or master’s degree in Computer Science, Electronics Engineering, Electrical Engineering.
• 5+ years of relevant experience in Product cybersecurity

Skills:

• 1) Understanding and experience in working across multiple phases of Secure Product Development Lifecycle, performing Penetration Testing of various technologies and Threat Modeling of products, systems and solutions. Focus on Cloud / Industrial IoT products is desirable.
• 2) Coding experience in one or more general purpose languages
• 3) Knowledge of attacks and mitigation in : Cloud-based applications, Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application securtiy, Mobile App security.
• 4) Have Experience with assessments of cloud products hosted in azure, aws or other cloud providers.
• 4) Having a knowledge of CI/CD pipelines, DevSecOps and tools for SAST, SCA and other CI/CD tools.
• 5) Able to understand cybersecurity concepts in depth and be able to apply those concepts to Eaton products for cybersecurity testing.
• 6) Able to perform Threat Modeling and Risk Assessment for Eaton products
• 7) Having hands-on experience in various Cybersecurity activities including but not limited to - Cybersecurity assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; secure coding; preferably on embedded,ICS and IoT products.
• 8) Having hands on expertise with cybersecurity tools like Nessus, Black Duck, Defensics, Nessus, Burpsuite, Coverity, Kali Linux, Threat Modeler, Azure Security Toolkit, Crowdstrike, Invicti etc.
• 9) Having Good understanding of security protocols (HTTPS, HSTS, TLS, SSH, 802.11 security, Bluetooth, Zigbee) and IC S protocols (IEC 61850, DNP3, Modbus, WirelessHART, CAN)
• 10) Having knowledge of attacks and mitigation in : Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security.
• 11) Having certifications like CEH, OSCP is a plus.