Sr Product Security Engineer

Benison Technologies Private Limited; Pune District; On-site; INR 1,200,000 - 2,500,000; Full time

Job summary

Benison Technologies Private Limited is seeking a Product Security Lead in Pune to drive secure-by-design across firmware, hardware, wireless, and cloud integrations. You will conduct threat modelling, risk assessments, and security architecture reviews for new and existing products.

You will plan penetration testing on embedded and OT systems, build security into the lifecycle, and mentor the product security team within an Agile environment.

Qualifications

• Experience implementing secure-by-design in firmware, hardware, wireless, and cloud integrations.
• Proven ability to conduct threat modelling and risk assessments.
• Experience with OT security practices and industrial protocols.
• Leadership experience building and mentoring teams.
• Familiarity with certification and compliance processes.
• Knowledge of IEC 62443, EN 18031, EU-CRA, EU RED standards.
• Penetration testing experience with OpenVAS and Metasploit is a plus.

Responsibilities

• Define and roll out secure-by-design practices across firmware, hardware, wireless, and cloud integrations.
• Run threat modelling, risk assessments, and security architecture reviews for products.
• Plan and carry out penetration testing and vulnerability assessments on embedded and OT systems.
• Build security into the product lifecycle, including vulnerability management and patching.
• Work with cross-functional teams in an agile setup from concept to release.
• Support certification and compliance audits, and prepare required security documentation.
• Contribute to research and technology innovation initiatives.
• Build, lead, and mentor the product security team.

Skills

IEC 62443

EN 18031

EU-CRA

EU RED

Secure-by-design

Embedded security

IoT security

OT protocols (Modbus, DNP3, OPC, ProfiN

OT systems (PLC, DCS, RTU, SCADA)

Firmware security

Hardware security

Wireless security

Team leadership

Team building

Tools

OpenVAS

Metasploit

Job description

• Ensure products comply with IEC 62443, EN 18031 (EU RED), and EU-CRA requirements.
• Define and roll out secure-by-design practices across firmware, hardware, wireless, and cloud integrations.
• Run threat modelling, risk assessments, and security architecture reviews for new and existing products.
• Plan and carry out penetration testing and vulnerability assessments on embedded and OT systems.
• Build security into the product lifecycle, including secure development, vulnerability management, and patching.
• Work with firmware, hardware, cloud, and product teams in an agile setup, from concept to release.
• Support certification and compliance audits, and prepare the required security documentation.
• Contribute to research and technology innovation initiatives.
• Build, lead, and mentor the product security team.

Required Skills

• IEC 62443, EN 18031, EU-CRA, EU RED
• Secure-by-design, embedded and IoT security
• OT protocols: Modbus, DNP3, OPC, Profinet
• OT systems: PLC, DCS, RTU, SCADA
• Firmware, hardware, and wireless interface security
• Team leadership and team building

Good to Have

• Threat modelling (STRIDE or similar)
• Penetration testing with OpenVAS and Metasploit