JobCubby JobCubby
Sign up
Weekday AI

Cyber Security Engineer CRA

Weekday AI Pune, Maharashtra, India

Technology, Information and Internet · 11-50 employees

4 d ago
security Senior (5-10 yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The Cyber Security Engineer will assess and strengthen cybersecurity across industrial control systems and operational technology environments, specifically focusing on Purdue Model levels 0-3. They will identify vulnerabilities, conduct risk assessments, and implement mitigation strategies for industrial equipment such as PLCs, RTUs, and DCS controllers.

What they look for

Cyber Security Industrial Control Systems Operational Technology Purdue Model Programmable Logic Controllers Remote Terminal Units Distributed Control System Industrial Automation Vulnerability Assessment Risk Assessment OPC UA Safety Instrumented Systems Industrial Communication Protocols Embedded Systems Security Firmware Development Network Security

Requirements

Candidates must have at least 5 years of hands-on experience in industrial cybersecurity, ICS, or OT security. A strong understanding of industrial automation architectures, communication protocols, and field devices is required.

Full description

This role is for one of Weekday’s clients

Min Experience: 5+ years Location: Pune, Maharashtra, India JobType: full-time

We are looking for a Cyber Security Engineer – CRA with hands-on experience in industrial control systems (ICS), operational technology (OT), and industrial automation security. The ideal candidate will have expertise in securing industrial equipment and control systems across Levels 0 to 3 of the Purdue Model, with a strong understanding of industrial controllers, field devices, communication interfaces, and industrial network security.

The role focuses on identifying cybersecurity risks, assessing vulnerabilities, and implementing security measures for industrial equipment and automation systems. Candidates must have practical experience with one or more Purdue Model levels between Level 0 and Level 3, particularly in environments involving PLCs, RTUs, DCS controllers, safety instrumented systems, sensors, and actuators.

Key Responsibilities

  • Assess and strengthen cybersecurity across industrial control systems and operational technology environments, focusing on Purdue Model Levels 0–3.
  • Evaluate the security of Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), Distributed Control System (DCS) controllers, and Safety Instrumented Systems (SIS).
  • Assess the cybersecurity of sensors, actuators, industrial field devices, and equipment-level control interfaces.
  • Identify vulnerabilities, security gaps, and potential threats affecting industrial automation equipment and control systems.
  • Support cybersecurity risk assessments and recommend appropriate mitigation strategies for industrial equipment and embedded control systems.
  • Evaluate industrial communication interfaces and gateways used for PLC connectivity, automation integration, OPC UA communication, and IT/MES connectivity.
  • Assess security controls across industrial equipment, including ultrasonic and non-ultrasonic welding machines, industrial heat-staking machines, and ultrasonic power supplies.
  • Collaborate with engineering, automation, firmware, and product development teams to address cybersecurity requirements throughout the equipment lifecycle.
  • Support security testing, vulnerability analysis, configuration reviews, and implementation of relevant cybersecurity controls.
  • Contribute to cybersecurity documentation, technical assessments, and compliance activities aligned with applicable industrial cybersecurity requirements.

Qualifications & Experience

  • Hands-on experience in industrial cybersecurity, ICS security, OT security, or industrial automation.
  • Practical experience with at least one or more levels of the Purdue Model, specifically Levels 0, 1, 2, or 3.
  • Strong understanding of industrial control components, communication interfaces, and automation architectures.
  • Experience working with PLCs, RTUs, or DCS controllers.
  • Understanding of industrial field devices, sensors, actuators, and safety-related control systems.
  • Familiarity with industrial communication protocols and gateways, including OPC UA and PLC/automation connectivity.
  • Ability to identify security risks and recommend practical cybersecurity measures for industrial equipment and control environments.
  • Strong analytical, troubleshooting, and problem-solving skills.

Must-Have Skills

  • Programmable Logic Controllers (PLCs)
  • Remote Terminal Units (RTUs)
  • Distributed Control System (DCS) Controllers
  • Industrial Control Systems (ICS) / Operational Technology (OT) Security
  • Purdue Model Levels 0–3 Experience

Good-to-Have Skills

  • Safety Instrumented Systems (SIS)
  • Sensors and Actuators
  • Firmware Development
  • Industrial Communication Protocols
  • OPC UA
  • Industrial Automation Gateways
  • Embedded Systems Security
  • Industrial Cybersecurity Risk Assessment

Scope of Industrial Equipment

The role will cover cybersecurity assessments and security activities for industrial equipment and connectivity solutions, including:

  • Ultrasonic and non-ultrasonic welding machines
  • Industrial heat-staking machines
  • Integrated ultrasonic power supplies
  • Fieldbus interface gateways for PLC and automation connectivity
  • Data interface gateways supporting OPC UA and IT/MES connectivity

Similar roles