Job
Description
As a Security Software Designer at Wabtec Corporation, you will play a crucial role in designing, developing, and implementing software solutions to protect systems and networks from cyber threats. Your work will involve close collaboration with cross-functional teams to ensure that security is seamlessly integrated into every phase of the software development lifecycle. **Key Responsibilities:** - Carry out security assessments in compliance with Wabtec CATO requirements on Embedded Products using Threat Model, Threat & Risk Analysis, and vulnerability analysis. - Develop Security Architecture and Design tailored to project needs to mitigate threats and obtain final Cybersecurity approval for release. - Design and develop secure embedded software applications. - Analyze and propose mitigation strategies for Security scan results including SAST, DAST, SCA, and FST requirements. - Collaborate with Development teams of different product lines to integrate secure practices into product design lifecycle. **Qualifications/Requirements:** - Bachelor's/Master's degree in CS/E&C/IS with a minimum of 8 years of overall working experience in Embedded Systems with Cybersecurity. - Proven track record in secure software design development with strong security practices. - In-depth understanding of security protocols, cryptography, and secure coding techniques. - Excellent problem-solving skills and keen attention to detail. **Essential Requirements:** - Strong technical expertise in Secure Embedded system Design and Implementation in Bear Metal & Embedded Linux including Secure Boot, Serial, USB, Ethernet, and IoT. - Hands-on experience with Programming Languages such as C, C++, and Python. - Familiarity with Secure Design Patterns & Principles, Standards like IEC62443, NIST 800 Standard, OWASP, CWE. - Working experience with Network Protocols, network Infrastructure, and services in Embedded Linux (Firewalls, Router, Switches, VPN, HTTP, SSH, SFTP, FTP, TFTP, SNMP, DHCP, MQTT, MQTTS, NTP, etc.). - Knowledge of Cryptographic Concepts such as Storage of passwords, accounts, keys, Certificates use, Crypto Key Management, Key Generation, and Key Usage. **Desired Requirements:** - Profound understanding of Network Security Protocols like HTTPS, SSL, TLS. - Experience with Authentication and Authorization mechanisms. - Familiarity with Gitlab Repository and Pipeline concepts. - Design and Development experience in FPGA, PLC, Cloud, and IoT-based secure systems. - Ability to propose optimal Security design solutions to meet project requirements. - Understanding and compliance with customer-proposed security requirements and standards. - Knowledge of Security Scan tools like Polaris, Blackduck, etc. - Proficiency in analyzing the system knowledge and identifying Threat Surface and Vector of threat. - Ability to conceptualize and propose Security solutions based on the Technology domain. **Work Model:** Hybrid (3 Days a week), subject to change based on Organization policies. **Travel:** Domestic/International - Minimal, based on project requirements. **Physical Requirement:** - Able to work in a hybrid model at Bengaluru facility and collaborate effectively with team members. - Capable of working long hours on Laptop/System as per project needs. Join Wabtec Corporation, a global leader in providing equipment, systems, digital solutions, and value-added services for various industries, and be a part of a diverse and inclusive environment that fosters innovation and continuous improvement. Visit our website to explore more about our commitment to diversity and inclusion.,
