Cybersecurity Engineer
Job Description
Secure autonomous platforms, robotics, and AI systems for defence, naval, and port customers in air-gapped and high-security environments. Cover embedded devices, communication links, software IP, on-prem infrastructure, and AI applications end to end.
Key Responsibilities
- Harden embedded and edge Linux systems with secure boot, disk encryption, access control, and kiosk lockdown
- Secure robotic middleware and field buses, including ROS 2/SROS2, DDS security, CAN bus, and MAVLink
- Implement tamper resistance, secure firmware updates, and hardware-bound licensing
- Support air-gapped patch delivery with signed packages, local HSM and key management, and on-prem SIEM and logging
- Secure datalinks between vehicles and ground stations using VPNs, firewalls, segmentation, and encryption
- Design and audit network architectures for air-gapped and isolated deployments
- Monitor and respond to security events using SIEM, IDS/IPS, and log analysis
- Perform penetration testing and vulnerability analysis on wireless, RF, Wi-Fi, cellular, SATCOM, and custom SDR datalinks
- Apply COMSEC / TRANSEC practices, anti-jamming hardening, and tactical data-link security
- Carry out vulnerability assessments and penetration testing on web apps, APIs, dashboards, and networks
- Secure CI/CD pipelines with code signing, dependency scanning, SAST/DAST, and secrets management
- Protect software IP through obfuscation or compilation, signed builds, and licence management
- Assess and mitigate AI-specific risks such as prompt injection, data leakage, model theft, and adversarial inputs
- Prepare security documentation, threat models, and compliance evidence for customer and defence audits
- Set internal security policies, access management, and secure development practices
Candidate Requirements
- B.E./B.Tech in CS, IT, E&TC, or a related field, with 1-2 years in cybersecurity, security engineering, or DevSecOps
- Strong Linux administration and networking fundamentals (TCP/IP, VLANs, routing, firewalls, VPNs)
- Hands-on experience with tools such as Nmap, Wireshark, Burp Suite, Metasploit, and Nessus/OpenVAS
- Understanding of cryptography: PKI, digital signatures, TLS, hashing, and key management
- Familiarity with the OWASP Top 10 and threat modelling (STRIDE or similar)
- Scripting in Python and/or Bash
- Indian nationality required; background verification may apply for defence projects
Good to Have
- Certifications such as CEH, OSCP, CompTIA Security+, eJPT, or CySA+
- OT/ICS, embedded, IoT, or automotive/CAN security experience
- Knowledge of standards such as IEC 62443, ISO 27001, NIST CSF, IACS UR E26/E27, or CERT-In guidelines
- Docker/Kubernetes security and cloud security (AWS/Azure)
- Awareness of AI/LLM security (OWASP LLM Top 10, MITRE ATLAS)
Knowledge Requirement
- Nmap / Wireshark / Burp Suite / Metasploit
- Nessus / OpenVAS / VAPT / Penetration Testing
- Linux Hardening / Secure Boot / System Hardening
- Firewall / VPN / IDS/IPS / SIEM
- Cryptography / PKI / TLS / Code Signing
- OWASP / Threat Modelling / STRIDE
- DevSecOps / SAST / DAST / CI/CD Security
- Wireless Security / RF Security / SDR
- ROS 2 Security / CAN Bus Security
- Python / Bash