Lead Cyber Security Engineer

Job Requirements

Cybersecurity Engineer

Summary

The Cybersecurity Systems Engineer (CYSE) is responsible for conducting cybersecurity risk assessments, performing threat modeling, managing security requirements, executing vulnerability analyses, and supporting cybersecurity compliance activities across product development programs. The role contributes significantly to TrueBeam platform initiatives while providing cybersecurity engineering support to other product platforms, ensuring consistent implementation of cybersecurity practices and requirements across the organization.

Experience

• 8+ years of product security experience
  
  

Mandatory Expertise

• Security architecture and design
• Strong knowledge of key security concepts – TCP/IP fundamentals, TLS, SSH, HTTPS, PKI, Certificate lifecycle
• Windows operating systems and networking
• Expertise in any languages such as Python, PowerShell, or Bash or .net
• Drive vulnerability assessment, CVE impact analysis and remediation activities across the product lifecycle.
• Experience working with Secure Development Lifecycle (SDL) practices including threat modelling, secure code review, static analysis, dependency management and vulnerability remediation
• Strong understanding of cybersecurity regulations, standards (IEC 62443, IEC 62351) and its impact of products and regulatory frameworks such as GDPR, ISO 27001, NIS2 and CRA.
• Good documentation and writing skills
  
  

Preferred Knowledge

• Linux operating systems.
• Docker/container fundamentals
• Container image vulnerabilities and Hardening, Kubernetes security fundamentals
• Container networking and secrets management, Basic cloud security concepts
• Understanding of Linux/container-based product architectures
• Capability to develop security tools like custom scanner or log analyzer
  
  

Areas Of Responsibility

• Support project teams in executing security activities throughout the development lifecycle, project management processes, service delivery, and product/solution releases
• Participate in incident response activities and escalation processes
• Conduct threat and risk analysis workshops
• Provide expertise and support for security tools used by product teams
• Deliver product and solution security training and develop training materials
• Develop and maintain security guidelines for product development teams
• Capture product and solution security lessons learned and contribute to continuous improvement initiatives, including guideline updates.
• Stay current with emerging security threats and technologies
• Support multiple projects simultaneously and dedicate the majority of working time to this function