Cyber Security Analyst

Job Title: Cyber Security AnalystJob Description

This Cyber Security Analyst role focuses on verifying and validating the security of products, services, and solutions with a strong emphasis on product security, industrial control systems, and embedded environments. You will create and execute security test plans, coordinate penetration testing activities, and collaborate closely with product security and development teams to ensure secure-by-design principles are embedded throughout the lifecycle. This position offers the opportunity to work hands-on in an engineering laboratory while contributing to broader product security initiatives and metrics within the business unit.

Responsibilities

• Work under the direction of the Business Unit Product Security Officer or Lead to support product security objectives.
• Create comprehensive security test plans and associated test artifacts to support product certification efforts within the business unit.
• Own the security verification and validation activities for all products and execute security tests for every major and minor release.
• Perform security requirement testing to validate that products meet defined security specifications.
• Conduct threat mitigation testing to ensure identified threats are adequately addressed.
• Execute static code analysis to detect security vulnerabilities and weaknesses in source code.
• Perform attack surface analysis to identify and minimize potential entry points for attackers.
• Carry out software composition analysis to identify and manage vulnerabilities in third-party and open-source components.
• Coordinate with independent penetration testing teams to plan and oversee abuse case and fuzz testing activities.
• Coordinate known vulnerability scanning activities with independent penetration testing teams to identify existing security issues.
• Coordinate and support penetration tests conducted by global or centralized cybersecurity teams.
• Coordinate PSIRT-specific testing with independent penetration testing teams to validate remediation of reported vulnerabilities.
• Support development teams by validating security fixes and patches prior to sharing builds with independent penetration testing teams.
• Collaborate with Product Security Engineers to handle PSIRT (Product Security Incident Response Team) activities and vulnerability management processes.
• Generate project security metrics in alignment with EIC-Pune and/or Business Unit guidelines.
• Report progress, issues, and results to the local leadership for all assigned activities.
• Contribute to EIC-Pune assigned initiatives and broader product security improvement programs.
• Work in an engineering laboratory to perform product and system-level security testing while following established safety practices and guidelines.
• Organize, prepare, and deliver compelling presentations to communicate security findings, risks, and recommendations to stakeholders.
• Use Microsoft Office tools to document test plans, results, metrics, and reports effectively.
• Apply secure-by-design principles and best practices, integrating security into existing development practices and processes.
• Leverage concepts such as secure development lifecycle and defense in depth when planning and executing security activities.
• Engage in threat modeling and vulnerability assessment activities to proactively identify and address security risks.
• Respect and uphold the organization’s values and ethics in all security-related activities.
• Collaborate effectively across teams, demonstrating strong organizational skills and interaction management to drive security initiatives under tight timelines.

Essential Skills

• Bachelor’s degree and/or equivalent years of relevant experience in a related field.
• 3–5 years of experience with product security standards and initiatives or practical work experience related to verification and validation of products, services, and solutions.
• Hands-on experience with security verification and validation activities, including security requirement testing and threat mitigation testing.
• Experience with static code analysis, attack surface analysis, and software composition analysis in a product development context.
• Knowledge of cybersecurity standards and frameworks such as IEC, ISO, NIST, and OWASP.
• Familiarity with risk assessment methodologies and CVSS scoring for evaluating and prioritizing vulnerabilities.
• Experience in industrial control systems (ICS), embedded systems, or network security.
• Understanding and practical application of secure-by-design principles and best practices.
• Familiarity with secure development lifecycle, secure-by-design, and defense-in-depth concepts.
• Experience with secure coding practices and code review processes.
• Ability to organize, prepare, and deliver clear and compelling presentations.
• Proficiency with Microsoft Office tools for effective communication, reporting, and information management.
• Self-motivation and the ability to work under tight timelines and manage multiple tasks.
• Strong problem-solving skills and interaction management capabilities.
• Strong organizational and collaboration skills to work effectively with cross-functional teams.
• Commitment to upholding organizational values and ethics in all work activities.

Additional Skills & Qualifications

• Master’s degree or equivalent experience in electronics engineering or a related field.
• Experience with penetration testing and security testing in industrial, automotive, or embedded domains.
• Familiarity with penetration testing tools such as Metasploit, Wireshark, and Burp Suite.
• Experience with vulnerability assessment and threat modeling activities.
• Knowledge of industry domains such as industrial control systems, factory automation, or automotive systems.
• Familiarity with hardware design and debugging concepts in embedded or control systems.
• Understanding of network protocols including TCP/IP, HTTPS, SSH, SNMP, OPC-UA, and MQTT.
• Understanding of firewalls, IDS/IPS, endpoint security, and access control systems.
• Prior experience in the industrial, factory automation, or control systems industry.
• Experience coordinating with independent penetration testing teams or global cybersecurity centers.
• Ability to contribute to organization-wide or business unit-specific security initiatives.
• Strong written and verbal communication skills for documenting and presenting security findings to technical and non-technical audiences.

Work Environment

The role is based in an engineering-focused environment where you will work closely with product security, development, and independent penetration testing teams. You will spend part of your time in an engineering laboratory performing product and system-level security testing while following established safety practices and guidelines. The position involves working with industrial control systems, embedded systems, and networked products, using a range of cybersecurity tools such as penetration testing frameworks, vulnerability scanners, static code analysis tools, and software composition analysis solutions. You will use standard office productivity tools, including Microsoft Office, to prepare documentation, metrics, and presentations. The work typically involves managing multiple releases and tight timelines, requiring strong organization and collaboration with cross-functional teams across the business unit.

Diversity, Equity & Inclusion

At Actalent, diversity and inclusion are a bridge towards the equity and success of our people. DE&I is embedded into our culture through:

• Hiring diverse talent
• Maintaining an inclusive environment through persistent self-reflection
• Building a culture of care, engagement, and recognition with clear outcomes
• Ensuring growth opportunities for our people

Actalent is an equal opportunity employer.

About Actalent

Actalent is a global leader in engineering and sciences services. For more than 40 years, we’ve helped visionary companies advance their goals. Headquartered in the United States, our teams span 150 offices across North America, EMEA, and APAC—with four delivery centers in India led by 1,000+ extraordinary employees who connect their passion with purpose every day.

Our Bangalore, Hyderabad, Pune, and Chennai delivery centers are hubs of engineering expertise, with core capabilities in mechanical and electrical engineering, systems and software, and manufacturing engineering. Our teams deliver work across multiple industries including transportation, consumer and industrial products, and life sciences. We serve more than 4,500 clients, including many Fortune 500 brands. Learn more about how we can work together at actalentservices.com.