Cybersecurity Engineer / Product Security Engineer

Job highlights

• Education: Bachelors degree in Computer Science,Cybersecurity,Information Security,Electronics,or a related technical field
• The ideal candidate should have strong hands-on experience in security risk assessments,threat modeling,security architecture,vulnerability assessment,security testing,and secure product development
• Preferred Industry Experience .

Job Summary

We are looking for experienced Cybersecurity / Product Security Engineers to support the design, development, assessment, and testing of secure web-based, embedded, and connected products/systems.

The ideal candidate should have strong hands-on experience in security risk assessments, threat modeling, security architecture, vulnerability assessment, security testing, and secure product development. Experience working with industrial, automotive, rail, transportation, manufacturing, mining, or other critical infrastructure environments will be highly preferred.

Job Details

• Position: Cybersecurity / Product Security Engineer

• Number of Positions: 2 Contingent Workers (CWs)

  Education Experience

• Education: Bachelor's degree in Computer Science, Cybersecurity, Information Security, Electronics, or a related technical field.

• Experience: 6+ years overall experience, with at least 4 years of hands-on experience in Product/Application Security, Security Engineering, Security Architecture, Risk Assessment, or Risk Management.

  Key Responsibilities

• Perform security risk assessments for products, applications, embedded systems, and connected systems.

• Conduct Threat Modeling, Threat Risk Assessments (TRA), Security Design Reviews, and Attack Surface Analysis.

• Identify security vulnerabilities, threats, attack vectors, and associated risks.

• Define and recommend appropriate security controls and mitigation strategies.

• Perform or support vulnerability assessments and security testing.

• Review product and application architectures from a cybersecurity perspective.

• Support implementation of Secure Product Development / Secure Software Development Lifecycle SSDLC practices.

• Collaborate with engineering teams to integrate security requirements throughout the product development lifecycle.

• Support DevSecOps practices and security integration into development and CI/CD processes.

• Evaluate products against applicable cybersecurity standards, frameworks, and regulations.

• Develop and maintain security requirements, risk documentation, threat models, and security assessment reports.

• Provide technical guidance to engineering and product teams on cybersecurity improvements.

• Work closely with Engineering, Product Management, Customers, Suppliers, and Leadership teams.

• Influence technical decisions and drive improvements in cybersecurity maturity across global teams.

• Stay updated on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.

  Mandatory Technical Skills

Candidates should have hands-on experience in several of the following areas:

• Threat Modeling

• Security Risk Assessment

• Threat Risk Assessment (TRA)

• Security Architecture

• Security Design Review

• Attack Surface Analysis

• Vulnerability Assessment

• Security Testing

• Application / Product Security

• Secure Product Development

• DevSecOps

• Cybersecurity requirements and risk management

  Cybersecurity Frameworks Standards

Strong knowledge of one or more of the following:

• IEC 62443

• NIST SP 800-53

• NIST Cybersecurity Framework (CSF)

• ISO/IEC 27001

• Other equivalent cybersecurity frameworks, regulations, and industry standards

  Security Architecture and Cryptography

Hands-on knowledge of security architecture and cryptographic technologies, including:

• PKI (Public Key Infrastructure)

• Secure Boot

• Key Management

• Certificate Lifecycle Management

• Secure Communications

• Cryptographic technologies and security mechanisms

  Preferred Industry Experience

Experience in any of the following industries will be an advantage:

• Rail / Transportation

• Automotive

• Industrial Automation

• Manufacturing

• Mining

• Critical Infrastructure

• Embedded / Connected Products

  Behavioral Professional Skills

• Strong analytical and problem-solving skills.

• Ability to work independently and manage multiple priorities.

• Excellent communication and presentation skills.

• Strong stakeholder management and collaboration skills.

• Ability to work effectively in a global, matrixed organization.

• Ability to influence technical decisions and communicate cybersecurity risks to technical and non-technical stakeholders.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.