Senior / Lead Product Cybersecurity Engineer

Secure Elements India; Bengaluru; Presencial; INR 1.000.000 - 2.000.000; Jornada completa

Descripción de la vacante

Secure Elements India is actively hiring a Product Cybersecurity Engineer to perform end-to-end Threat Analysis and Risk Assessment (TARA) for Windows, Linux, Android/iOS, cloud-based apps, embedded systems, and connected industrial products. You will lead structured AI-assisted cybersecurity workflows, identify assets, model threats, and recommend mitigations with traceable results.

You will collaborate with cybersecurity architects, product owners, software teams, and customer stakeholders to

Formación

• 2–8 years of product cybersecurity experience including threat modelling and TARA.

Responsabilidades

• Perform end-to-end TARA for multiple platforms (Windows, Linux, Android/iOS, cloud, embedded).

Conocimientos

STRIDE analysis

Threat modelling

TARA

CVSS scoring

Vulnerability analysis

IEC 62443 / ISO 21434

Cloud/app security

Windows/Linux security

Educación

Bachelor's or Master's in CS/Engineering/InfoSec

Herramientas

Microsoft Threat Modeling Tool

OWASP Threat Dragon

Burp Suite

OWASP ZAP

Wireshark

SBOM/SCA tools

Descripción del empleo

Secure Elements India is a product cybersecurity engineering company dedicated to securing Software-Defined Vehicles (SDVs), connected mobility, and industrial/Operational Technology (OT) systems across their entire lifecycle—from concept and design through deployment and in-life operations.

The company combines AI-driven security intelligence, embedded protection, and compliance-focused engineering tools. Its flagship platform, CRISKLE Workspace, enables Threat Analysis and Risk Assessment (TARA), vulnerability management, SBOM analysis, cybersecurity requirements engineering, functional safety alignment, and continuous risk monitoring.

Secure Elements supports automotive and industrial cybersecurity engineering aligned with ISO/SAE 21434, UNECE R155/R156, IEC 62443, EU Cyber Resilience Act (CRA), EU Machinery Regulation, and other emerging global regulations.

The company also delivers embedded Intrusion Detection and Prevention Systems (IDPS) for CAN, Automotive Ethernet, and RF, integrated with a Mobility Security Operations Centre (MSOC) for threat detection, intelligence, and response.

Based in Bengaluru (India), Coventry (UK) and collaborating with partners across Europe and Asia, Secure Elements supports OEMs, Tier-1 suppliers, industrial equipment manufacturers, and technology providers across automotive, EV/EVSE, V2X, industrial IoT, connected machinery, and cloud-connected ecosystems.

Role Description

Company Description

Secure Elements India is a product cybersecurity engineering company dedicated to securing Software-Defined Vehicles (SDVs), connected mobility, and industrial/Operational Technology (OT) systems across their entire lifecycle—from concept and design through deployment and in-life operations.

The company combines AI-driven security intelligence, embedded protection, and compliance-focused engineering tools. Its flagship platform, CRISKLE Workspace, enables Threat Analysis and Risk Assessment (TARA), vulnerability management, SBOM analysis, cybersecurity requirements engineering, functional safety alignment, and continuous risk monitoring.

Secure Elements supports automotive and industrial cybersecurity engineering aligned with ISO/SAE 21434, UNECE R155/R156, IEC 62443, EU Cyber Resilience Act (CRA), EU Machinery Regulation, and other emerging global regulations.

The company also delivers embedded Intrusion Detection and Prevention Systems (IDPS) for CAN, Automotive Ethernet, and RF, integrated with a Mobility Security Operations Centre (MSOC) for threat detection, intelligence, and response.

Based in Bengaluru (India), Coventry (UK) and collaborating with partners across Europe and Asia, Secure Elements supports OEMs, Tier-1 suppliers, industrial equipment manufacturers, and technology providers across automotive, EV/EVSE, V2X, industrial IoT, connected machinery, and cloud-connected ecosystems.

We are hiring a Product Cybersecurity Engineer / Senior Product Cybersecurity Engineer – TARA & Risk Assessment for a full-time, on-site position in the Greater Bengaluru Area, with 2–8 years of relevant experience.

The role focuses on performing end-to-end cybersecurity Threat Analysis and Risk Assessment (TARA) for Windows, Linux, Android/iOS, cloud-based applications, embedded systems, and connected industrial products.

The engineer will work with structured, AI-assisted cybersecurity engineering workflows to identify assets, model threats, assess vulnerabilities and risks, evaluate security controls, and recommend mitigation measures with complete traceability.

Key responsibilities include:

• Perform end-to-end TARA, covering asset identification, threat scenarios, attack paths, feasibility and impact assessment, risk determination, and risk treatment.
• Conduct STRIDE-based threat modelling, data flow analysis, trust boundary identification, attack surface analysis, and misuse-case evaluation.
• Perform vulnerability analysis using CVE/CWE databases, SBOM/SCA evidence, and threat intelligence; independently calculate and justify CVSS v3.1/v4.0 scores.
• Assess cybersecurity controls covering authentication, authorization, PKI, cryptographic key management, secure software updates, API security, cloud IAM, and device identity.
• Define cybersecurity goals, technical security requirements, mitigation strategies, and residual-risk assessments.
• Map cybersecurity risks and controls to applicable standards and regulations, including IEC 62443, ISO/SAE 21434, EU CRA, and related frameworks.
• Develop traceable TARA reports, risk registers, threat catalogues, security recommendations, and compliance evidence.
• Collaborate with cybersecurity architects, product owners, software teams, and customer stakeholders through technical workshops and design reviews.
• Support continuous cybersecurity risk assessment by incorporating emerging vulnerabilities, SBOM changes, threat intelligence, and evolving product architectures.

Qualifications

• 2–8 years of relevant experience in product cybersecurity, threat modelling, TARA, application security, embedded security, or industrial/OT cybersecurity.
• Mandatory hands-on experience with STRIDE, including threat identification, data flow diagrams, trust boundaries, and attack-path analysis.
• Mandatory experience independently determining CVSS v3.1/v4.0 scores, including exploitability metrics, impact assessment, vector selection, and scoring justification.
• Practical knowledge of cybersecurity risk assessment methodologies, including attack feasibility, impact rating, risk matrices, risk treatment, and residual-risk evaluation.
• Working knowledge of IEC 62443-4-1/4-2, EU CRA, EN 40000-1-2, ISO/SAE 21434, UNECE R155/R156, and other applicable product cybersecurity standards and regulations.
• Experience with Windows/Linux application security, embedded systems, cloud platforms, APIs, or mobile application security.
• Familiarity with MITRE ATT&CK, CAPEC, CWE/CVE, OWASP ASVS/MASVS, NIST SSDF, and secure software development practices.
• Understanding of security architecture, cryptography, PKI, secure signing, identity and access management, and secure update mechanisms.
• Experience with cybersecurity engineering or threat-modelling tools, vulnerability management platforms, and structured risk assessment workflows.
• Strong technical documentation, analytical problem-solving, communication, and cross-functional collaboration skills.
• Bachelor's or Master's degree in Computer Science, Electronics, Information Security, Cybersecurity, or a related engineering discipline.

Preferred Qualifications

• Experience in automotive, industrial automation, OT/ICS, connected machinery, or IoT product cybersecurity.
• Knowledge of EU Machinery Regulation (EU) 2023/1230, ISO 27001, and cloud security architecture.
• Experience with AI-assisted threat modelling, automated TARA workflows, cybersecurity compliance traceability, or continuous risk assessment.
• Familiarity with security assessment tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, Burp Suite, OWASP ZAP, Wireshark, or SBOM/SCA tools.
• Relevant certifications such as CSSLP, CISSP, GICSP, ISA/IEC 62443, or equivalent.

Join Secure Elements and help engineer secure, resilient, and regulation-ready products for the future of connected mobility and industrial systems.