Cyber Security Tester Team Lead

Cyber Security Tester Team Lead

Company Description

Festo, a family-owned enterprise headquartered in Germany, has been at the forefront of innovation in factory automation for over 99 years. Our offerings range from individual components to intricate, customised solutions and systems. As a global business with a firm family ethos, we recognise the importance of acting responsibly, both globally and locally. We are committed to enhancing the quality of life and conserving resources through our focus on advanced technologies, knowledge, and lifelong learning. With a presence in over 176 countries and a collaborative network spanning more than fifteen development locations worldwide, we are truly a global player.

Software Hub, Bengaluru

Festo is a product-driven organisation, and our Software Hub team in Bengaluru actively contributes to global products. In India, we work with diverse and cutting-edge software and embedded technologies, encompassing fields such as mechanical engineering, electronics, embedded software, AI/ML, and cyber security. Our dynamic and rapidly growing team is making significant strides in these areas.

Role Description

Festo is establishing a Product Security Testing team in India, and we are looking for highly motivated Cyber Security Engineers with experience in security testing, particularly in the domain of Embedded and IoT products. We seek enthusiastic, young, and talented Cyber Security Engineers who are passionate about working with industrial devices, identifying security vulnerabilities, and helping the team validate fixes. As a Cyber Security Engineer, you will collaborate with your teammates in the cyber security testing team on various products across the organisation to ensure that all Festo products are cyber security compliant and free from vulnerabilities.

Your Responsibilities

• Perform penetration testing of Festo products.
• Assist in creating and maintaining test plans and checklists.
• Develop test specifications, test cases, and test plans for security vulnerability testing of Festo products.
• Execute test cases effectively.
• Conduct basic vulnerability Assessment using tools like Nessus, OpenVAS and Nmap etc.
• Perform protocol-level black-box fuzzing tests using various open-source and proprietary tools.
• Support documentation of test results and collaborate with the development team.
• Participate in automating test processes within CI/CD environments.

Our Requirements

• Education: Bachelors degree in engineering, Computer Science, Mechatronics, Information Science, Electronics, Cyber Security, or a related field.
• Mandatory Experience:
• Minimum of 6 years of experience in device security testing, ideally within the Industrial Automation or Automotive sectors.
• Proficiency in programming languages such as C/C++, Python, or Shell scripting and hands on experience with CI/CD practices.
• Familiarity with different industrial protocols, fuzzing protocols, and PLC systems and hands on experience in the embedded domain.
• Understanding of the Secure Development Lifecycle and standards such as IEC 62443-4.
• Experience with tools like OpenVAS, Nessus, Nmap, Wireshark, and penetration testing for embedded or IoT systems.
• Hands on experience with various industrial protocols (e.g., Profinet, EtherCAT, Ethernet/IP, Modbus, OPC/UA, TSN) and PLC systems (e.g., Siemens, Rockwell, Yokogawa, Schneider Electric, Beckhoff, ABB, Omron), as well as automotive communication protocols (CAN, LIN, FlexRay).
• Relevant certifications are advantageous: OSCP, CRTP, CRTO, eWPTX, CPENT, LPT, PNPT.

What We Offer

• Opportunities to work on challenging software projects with a product-centric approach.
• Collaboration with an agile Indo-German team.
• A growth-oriented work environment with access to various learning resources.
• On-the-job training and development opportunities.

Job Location: Bengaluru, India
Job Type: Full-time
Job Level: Team Lead
Experience: 10+ years