Product Security Analyst

Job Description Summary

Product Cyber-security Analyst is responsible for the analysis of controllers , systems, Cloud architectures for cyber security requirements.

Conduct tests to verify Cyber security levels and recommend mitigation plans for products , systems during tendering ,Project execution and product development stages.

As a key member of a global and matrixed design team, he will also be responsible for secure design of cloud and Customer facing Dashboards.

Job Description

Essential Responsibilities

• Involve in reviews, suggest architectural changes, conduct tests to ensure systems, controllers, and Cloud platform meet Cyber security requirements .
• Collaborate with a team of controls and system engineers developing operational software for various subsystems.
• The position requires a clear understanding of OT System, cloud application architecture and conversant with all Cyber security requirements.
• This role requires strong cooperation with system and subsystem teams necessary for command and control of the systems involved.
• The architect should be comfortable making design decisions in a sometimes-uncertain context, crafting innovative solutions, and demonstrating rigorous and decisive leadership.
• Work with multiple teams in different location to deliver Cyber secure software to meet customer requirements.
  
  

• Collaborate with system and subsystem engineers to develop top level software requirements, architecture and designs.
• Facilitate decisions and bring teams together to design and document software architecture, modularity, and future-proof.
• Involve in proofs-of-concept to prove out strategy and manage development and product risks.
• Champion testing and validation of critical architecture and interface requirements for real time controls system software as well as application tools.
• Own production of technical documentation for software architecture, design, verification plans.
• Contribute to multi-generation product and tool planning.
• Ensure all software developed is compliant to Cyber-security requirements.
  
  

• Bachelor /Master Degree in computer science or relevant engineering or equivalent knowledge / experience with 5+ Years of Experience.
• Significant software development experience for Cloud based systems.
• Experience in Cyber security for Controller, Systems in OT Space and in Cloud architectures.
• Familiar with penetration testing for Controllers, Systems, Web software’s, CAPEC, Ethical hacking.
• Experience on Cyber security/network tools like Wireshark, NESSUS, Burp Suite, etc.
• Design and development skills using latest Java/Java EE technologies and open source frameworks including Spring, JSF, Hibernate, OpenJpa and EclipseLink.
• Experienced in different phases of Software Development Life cycle (SDLC) including Design, Implementation and Testing.
• Extensively worked on web technologies like JavaScript, jQuery, AJAX, JSON, AngularJS, Angular 6, NodeJs, Spring, Hibernate, Spring boot, MVC, RESTful Web Services, Flux, SOAP.
• Cloud platform experience : AWS
• Database RDBMS, MySQL NoSQL databases
• Software component : MS Visual Studio, MS Office, MS Visio, SVN, GitHub
• Linux and Windows OS
• Extensively worked on Software Configuration Management tools like Git.
• Hands on experience with Enterprise Application and Web Application servers like Tomcat, and WLP.
  
  

• Strong software development skills in C++, C#, Python.
• Familiar with ISA -624443, NIST 800 standards.
• Experience in software development including system design, requirement gathering, software development and verification, build and release, documentation.
• Experience in build automation, continuous integration, configuration management, verification, deployment of software.
• Experience in database design and version control repository-based applications.
• Demonstrated track record of success with excellent technical written and verbal communication skills.
• Proven project management experience.
• Experience in highly demanding computational power software, HPC and cloud-based engineering solutions.
• Leadership experience in a research and development environment.