Senior Cyber Security Specialist

At ABB, we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.

This Position reports to:

Your role and responsibilities :

We are seeking a skilled Senior Cybersecurity Specialist with deep knowledge of product security, secure software development, and cybersecurity engineering to join our team. You will manage the design, implementation, and continuous improvement of cybersecurity controls for digital products and solutions, ensuring they are secure, resilient, and compliant with applicable cybersecurity standards and regulations. This role requires a unique combination of security engineering knowledge, risk management, threat modeling, and software development lifecycle security to deliver secure, scalable, and maintainable products in production environments.

The work model for the role is: #LI-Hybrid

This role is contributing to the Motion Business Service Division in Bangalore India.

You will be mainly accountable for:

• Own the secure software development lifecycle and guide the product team to implement the security practices at different stages of the software development process.
• Own software supply chain security, including defenses against risks from open-source packages, third-party binaries, container base images, build tools, and other software dependencies.
• Own first-party software security, including code and container scanning, automated security testing in CI, external penetration tests, and the integrity and provenance of software we build and publish.
• Own and run the responsible vulnerability disclosure program, including triaging external reports, maintaining submission quality standards, and scaling the review process.
• Partner with engineering teams from concept through implementation to conduct security design reviews, define secure architectures, and ensure security best practices are followed.

Qualifications for the role:

• 
  Product Security & Secure SDLC: 10+ years of experience across software engineering, application security, security engineering, or product security, with deep knowledge of Secure SDLC, Secure by Design, Secure by Default, OWASP, ISO 27001, NIST SP 800-53, and IEC 62443-4-2 standards.
• Security Architecture & Risk Assessment: Experience in conducting secure design and architecture reviews, developing reusable security reference architectures and security blueprints aligned with Microsoft Security Baselines and Bow-Tie models, and performing product security risk assessments.
• Threat Modeling & Security Analysis: Proficiency in STRIDE, DREAD, PASTA, and MITRE ATT&CK frameworks, with experience using tools such as IriusRisk and Microsoft Threat Modeling Tool to identify threats, assess risks, and define mitigations.
• DevSecOps & Application Security: Practical experience integrating security into CI/CD pipelines, including SAST (SonarQube, WizCode), SCA (Black Duck Hub), DAST and vulnerability scanning (Nmap, Nessus, Qualys, Burp Suite), and SBOM generation and management using OWASP Dependency-Track.
• Cloud & Platform Security: Deep understanding of cloud-native architectures, microservices, Kubernetes, containers, and multi-tenant SaaS environments, with practical knowledge of security controls across Microsoft Azure, AWS, and GCP.
• Identity, Authentication & Cryptography: Solid knowledge of authentication and authorization protocols, including OpenID Connect, OAuth 2.0, SAML, and mTLS, along with cryptographic protocols and algorithms such as TLS, AES, RSA, ChaCha20-Poly1305, SHA, ECC, and Diffie-Hellman key exchange.
• Vulnerability Management & Governance: Proven experience in vulnerability triaging, coordinated vulnerability disclosure, product risk remediation, and GRC activities aligned with ISO 27005, NIST SP 800-37, SOX, GDPR, the Cyber Resilience Act (CRA), and IEC 62443.
• Leadership, Collaboration & Security Enablement: Bachelor's degree in Computer Science or a related field, with demonstrated ability to influence engineering and product leadership, define security policies and secure coding standards, deliver security awareness and secure coding training, and communicate technical risks effectively to executive stakeholders.

More about us :

ABB Motion Services serve customers around the globe with innovative services to maximize performance, uptime and energy efficiency throughout the lifetime of electrical motion solutions. Electrical motion is applied everywhere in industries, cities, infrastructure and transportation and is a cornerstone of the energy revolution. Our people and culture are the foundation of our success. We drive innovations through digitalization and make the difference for our customers and partners every day. ABB Motion keeps the world turning, while saving energy every day.

Building a cleaner, smarter future takes all kinds of minds: the curious, the courageous, and the creative. We welcome people from all backgrounds and experiences.

Ready to make an impact? Apply today or visit www.abb.com to learn more about the impact of our solutions across the globe.

Recruitment Fraud Warning

ABB never asks for payment from job applicants. All genuine job offers follow a formal application and interview process.

View current job openings and apply at: https://careers.abb/global/en/home

For more information, read our full fraud warning notice at: https://global.abb/group/en/careers/how-to-apply/fraud-warning