Cyber Security Engineer CRA

This role is for one of Weekday’s clients

Min Experience: 5+ years

Location: Pune, Maharashtra, India

JobType: full-time

We are looking for a Cyber Security Engineer - CRA with hands-on experience in industrial control systems (ICS), operational technology (OT), and industrial automation security. The ideal candidate will have expertise in securing industrial equipment and control systems across Levels 0 to 3 of the Purdue Model, with a strong understanding of industrial controllers, field devices, communication interfaces, and industrial network security.

The role focuses on identifying cybersecurity risks, assessing vulnerabilities, and implementing security measures for industrial equipment and automation systems. Candidates must have practical experience with one or more Purdue Model levels between Level 0 and Level 3, particularly in environments involving PLCs, RTUs, DCS controllers, safety instrumented systems, sensors, and actuators.

Requirements

Key Responsibilities

• Assess and strengthen cybersecurity across industrial control systems and operational technology environments, focusing on Purdue Model Levels 0-3.
• Evaluate the security of Programmable Logic Controllers (PLCs), Remote Terminal Units (RTUs), Distributed Control System (DCS) controllers, and Safety Instrumented Systems (SIS).
• Assess the cybersecurity of sensors, actuators, industrial field devices, and equipment-level control interfaces.
• Identify vulnerabilities, security gaps, and potential threats affecting industrial automation equipment and control systems.
• Support cybersecurity risk assessments and recommend appropriate mitigation strategies for industrial equipment and embedded control systems.
• Evaluate industrial communication interfaces and gateways used for PLC connectivity, automation integration, OPC UA communication, and IT/MES connectivity.
• Assess security controls across industrial equipment, including ultrasonic and non-ultrasonic welding machines, industrial heat-staking machines, and ultrasonic power supplies.
• Collaborate with engineering, automation, firmware, and product development teams to address cybersecurity requirements throughout the equipment lifecycle.
• Support security testing, vulnerability analysis, configuration reviews, and implementation of relevant cybersecurity controls.
• Contribute to cybersecurity documentation, technical assessments, and compliance activities aligned with applicable industrial cybersecurity requirements.

Qualifications & Experience

• Hands-on experience in industrial cybersecurity, ICS security, OT security, or industrial automation.
• Practical experience with at least one or more levels of the Purdue Model, specifically Levels 0, 1, 2, or 3.
• Strong understanding of industrial control components, communication interfaces, and automation architectures.
• Experience working with PLCs, RTUs, or DCS controllers.
• Understanding of industrial field devices, sensors, actuators, and safety-related control systems.
• Familiarity with industrial communication protocols and gateways, including OPC UA and PLC/automation connectivity.
• Ability to identify security risks and recommend practical cybersecurity measures for industrial equipment and control environments.
• Strong analytical, troubleshooting, and problem-solving skills.

Must-Have Skills

• Programmable Logic Controllers (PLCs)
• Remote Terminal Units (RTUs)
• Distributed Control System (DCS) Controllers
• Industrial Control Systems (ICS) / Operational Technology (OT) Security
• Purdue Model Levels 0-3 Experience

Good-to-Have Skills

• Safety Instrumented Systems (SIS)
• Sensors and Actuators
• Firmware Development
• Industrial Communication Protocols
• OPC UA
• Industrial Automation Gateways
• Embedded Systems Security
• Industrial Cybersecurity Risk Assessment

Scope of Industrial Equipment

The role will cover cybersecurity assessments and security activities for industrial equipment and connectivity solutions, including:

• Ultrasonic and non-ultrasonic welding machines
• Industrial heat-staking machines
• Integrated ultrasonic power supplies
• Fieldbus interface gateways for PLC and automation connectivity
• Data interface gateways supporting OPC UA and IT/MES connectivity