Product Security Engineer

This Product Security Engineer role in Pune focuses on executing product security controls and validation activities for embedded industrial products. You will implement secure boot, firmware integrity checks, authentication, and vulnerability mitigation mechanisms, participate in requirement analysis, documentation, and threat modeling, and perform security testing including fuzzing, protocol security validation, and cryptographic checks. Responsibilities include conducting vulnerability scanning using tools such as Nessus, OpenVAS, or Qualys, validating security controls against IEC 62443-4-2 requirements, and analyzing industrial communication protocol security for HART, Modbus, Ethernet/IP, and ProfiNet. The role also involves developing automated test scripts using Python and collaborating with cross-functional engineering teams to support security deliverables. Familiarity with OWASP Embedded Top 10 and CWE/CVE databases is required.