Senior R&D Engineer Cyber Security

ABB Inc; Bengaluru; Hybrid; INR 1,500,000 - 3,000,000; Full time

Job summary

ABB is seeking a senior security testing specialist in Bangalore to conduct vulnerability assessments and pentesting of embedded devices, web apps, APIs, and mobile apps. You will define hardware security testing strategies, perform threat analysis, and produce technical reports for development teams.

Expertise in TCP/IP, protocols, and REST/SOAP security is required. Hybrid work model in Bengaluru with opportunities to influence testing methodologies and cloud security practices within the R&D

Qualifications

• B.E./B.Tech in Computer Science/Electronics with 7-10 years in security.
• M.Tech in Cyber Security or Networking with CGPA 6.5+.
• In-depth knowledge of TCP/IP networking and application protocols.
• Understanding of software exploitation and common vulnerabilities.
• Experience with port scanning, vulnerability assessment, pentesting and fuzzing tools.
• Strong web apps, API (REST/SOAP) security testing and reporting.
• Knowledge of OWASP Top 10 & SANS 25 vulnerabilities and mitigations.
• Experience with mobile app and API security testing; scripting aptitude is a plus.

Responsibilities

• Vulnerability assessment and Pentesting of embedded devices, host-based software, web apps, APIs and mobile apps.
• Define hardware security testing strategy and threat analysis.
• Analyze results and write technical reports.
• Provide fixes and guidance to device/software development teams.
• Evaluate new testing methodologies for the organization.
• Cyber security testing of Wi‑Fi and Bluetooth devices.
• Research testing security of protocols, interfaces, and cloud/API security.
• Create new test methodologies.

Skills

Network security

Penetration testing

Threat modeling

Scripting (Python/Shell)

Web API security

Mobile app security

Fuzzing tools

Port scanning

HTTP/Web protocols

Security testing of protocols

Cloud/API security

Education

B.E./B.Tech in Computer Science or Electronics

M.Tech in Cyber Security or Networking

Tools

Nmap

Burp Suite

OWASP ZAP

Wireshark

Job description

At ABB, we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.This Position reports to:R&D Team LeadIn this role, you will have the opportunity to support the strategic technology direction by contributing your own ideas for identifying, proposing, and implementing innovative technology, software and solutions. Each day, you will assist the Research and Development (R&D) team by executing your assigned tasks and using technical knowledge in a structured way. You will also showcase your expertise by staying abreast of the state of the art and actively applying this knowledge.The work model for the role is: #LI HybridThis role is contributing to the Process Automation Business in Bangalore.Roles and Responsibilities :Vulnerability assessment and Pentesting of embedded devices and host based industrial software’s, Web applications, API’s and Mobile Apps.Defining Hardware security testing strategy.Threat analysis of the devices from security point of view.In-depth analysis of results and writing technical reports.Providing suggestion/fixes for improvement to device/software development teams.Evaluation of new testing methodologies relevant for the organizationCyber Security testing Wi-Fi and Bluetooth devices for Security vulnerabilities.Research on testing security of Protocols, interfaces and Technologies used for communication to cloud based platforms and API Security.Create new test methodologies.Qualification for the role :B.E/ B.Tech in Computer Science/ Electronics Engineering with 7-10 years of working experience in security domain.M.Tech in Cyber Security or Networking with CGPA of 6.5 and above.In depth knowledge of TCP/IP networking and application protocols concepts (knowledge of control communication protocols and technologies is a major plus).Understanding of software exploitation and common vulnerabilities.Good understanding of port scanning, Vulnerability assessment, penetration testing and Fuzzing tools.Strong knowledge in web applications scanning, penetration testing and vulnerability Assessment reporting.Good knowledge of the HTTP protocol, and all other protocols associated with web technologiesFair understanding of OWASP Top 10 & SANS 25 Vulnerabilities and their mitigations.Good knowledge of Mobile app and APIs (REST, SOAP) security testing.Proficiency in one of the scripting languages such as shell, python, ruby etc. is an added advantage.More about us :ABB a provides a comprehensive range of integrated automation, electrical and digital systems and services for customers in the process, hybrid and maritime industries. These offerings, coupled with deep domain knowledge in each end market, help to optimize productivity, energy efficiency, sustainability and safety of industrial processes and operations.Building a cleaner, smarter future takes all kinds of minds: the curious, the courageous, and the creative. We welcome people from all backgrounds and experiences.Ready to make an impact? Apply today or visit www.abb.com to learn more about the impact of our solutions across the globe.Recruitment Fraud WarningABB never asks for payment from job applicants. All genuine job offers follow a formal application and interview process.View current job openings and apply at: https://careers.abb/global/en/homeFor more information, read our full fraud warning notice at: https://global.abb/group/en/careers/how-to-apply/fraud-warning