01
TRCD-26-06754
Cybersecurity Engineer – Cyber Resilience Act (CRA) & Industrial Product Security
This contract role focuses on assessing and improving cybersecurity for industrial, embedded, and connected products, with particular emphasis on EU Cyber Resilience Act (CRA) readiness. The core requirements include CRA knowledge, product cybersecurity risk assessment, threat modeling, Secure SDLC, vulnerability management, security testing, and familiarity with embedded and network security controls. Experience with penetration testing, SAST/DAST, SCA, firmware analysis, SBOMs, and vulnerability identifiers is relevant to the product assessment and remediation work. The requested experience band is 3–7+ years, and the role is based in Bengaluru; the work mode is not specified. The engineer will work cross-functionally with product and engineering groups, PSIRT, quality, legal, compliance, and supply chain, and will maintain technical evidence and compliance documentation.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 3 years and Maximum 7 years
Role overview
Why This Role Matters.
This contract role focuses on assessing and improving cybersecurity for industrial, embedded, and connected products, with particular emphasis on EU Cyber Resilience Act (CRA) readiness. The core requirements include CRA knowledge, product cybersecurity risk assessment, threat modeling, Secure SDLC, vulnerability management, security testing, and familiarity with embedded and network security controls. Experience with penetration testing, SAST/DAST, SCA, firmware analysis, SBOMs, and vulnerability identifiers is relevant to the product assessment and remediation work. The requested experience band is 3–7+ years, and the role is based in Bengaluru; the work mode is not specified. The engineer will work cross-functionally with product and engineering groups, PSIRT, quality, legal, compliance, and supply chain, and will maintain technical evidence and compliance documentation.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Translate CRA requirements into technical product cybersecurity requirements and engineering controls.
03
Perform threat modeling and product security assessments covering hardware, firmware, software, communication interfaces, and connected services.
04
Support CRA compliance activities including remediation, security testing, technical documentation, SBOM analysis, vulnerability management, and conformity assessment readiness.
05
Work closely with Engineering, Product and Program Management, Product Security/PSIRT, Quality, Legal, Compliance, and Supply Chain to address identified cybersecurity risks.
06
Implement and validate secure-by-design and secure-by-default practices within product development.
07
Analyze product vulnerabilities and third-party/open-source components and support vulnerability remediation and security updates.
08
Support product security incident and vulnerability-handling activities, including technical analysis needed for CRA reporting processes.
09
Maintain cybersecurity assessment results, technical evidence, remediation status, and CRA compliance documentation.
10
Provide technical support for customer inquiries related to product cybersecurity, CRA, vulnerabilities, SBOMs, security updates, and security questionnaires.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Cyber Resilience Act
Required
02
CRA
Required
03
Product Security
Required
04
Industrial Cybersecurity
Required
05
OT Security
Required
06
Embedded Security
Required
07
IoT Security
Required
08
Firmware Security
Required
09
Threat Modeling
Required
10
Secure SDLC
Required
11
Secure by Design
Required
12
Secure by Default
Required
13
SBOM
Required
14
SCA
Required
15
Software Composition Analysis
Required
16
CVE
Required
17
CVSS
Required
18
CWE
Required
19
SAST
Required
20
DAST
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Working knowledge of the EU Cyber Resilience Act (CRA) and product cybersecurity requirements
Cybersecurity assessment experience with industrial, embedded, IoT, OT, or connected products
Product cybersecurity risk assessment and gap assessment
Threat modeling and product security assessment across hardware, firmware, software, interfaces, and connected services
Secure SDLC and secure-by-design / secure-by-default practices
Vulnerability management and remediation, including third-party and open-source components
Security testing experience, such as penetration testing, vulnerability scanning, SAST/DAST, SCA, or firmware security analysis
Understanding of embedded software/firmware and network security controls, including authentication, encryption, secure communications, secure boot, and updates
Knowledge of CVE, CVSS, CWE, SBOM, and Software Composition Analysis (SCA)
Ability to translate cybersecurity requirements into technical controls and collaborate with engineering teams
Technical documentation and cross-functional communication
Preferred
Nice to Have
There are no additional preferred qualifications for this position. If you meet the essential requirements, we encourage you to apply.
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Cybersecurity Engineer – Cyber Resilience Act (CRA) & Industrial Product Security
One page, about two minutes. We only ask for what we actually need to have a first conversation.