Job Title: Sr. Product Cybersecurity Engineer
Location: Pune, India
What you will do:
In this pivotal role within the Global Product Security team, you will be responsible for driving continuous improvement initiatives aligned with our cybersecurity maturity framework, ensuring proactive management of security and data privacy risks throughout the product lifecycle. You will leverage your expertise in secure software development practices to embed security and privacy by design within our product offerings.
How you will do it:
- Provide cybersecurity guidance and expertise to product development teams and business leaders during all phases of the software development lifecycle.
- Architect security and privacy by design into software applications for mobile, embedded systems, and cloud environments.
- Drive secure SDLC activities including security requirements, architectures, threat models, and testing.
- Periodically assess and refine security policies, standards, and compliance metrics.
- Quantify product risk and identify appropriate security controls.
- Review product architectures for security vulnerabilities and collaborate on remediation strategies.
- Coordinate with third-party penetration testing teams to ensure comprehensive security assessments.
- Maintain awareness of current security threats and vulnerabilities impacting our products.
- Support incident response operations and vulnerability remediation activities.
- Drive security awareness and training initiatives across the organization.
What we look for:
- Bachelor's or higher degree in Engineering, Cybersecurity, or a related technical field.
- 5-10 years of experience in product or application cybersecurity.
- Strong knowledge of secure SDLC practices, security architectures, and compliance activities.
- Proven experience in delivering results using agile methodologies.
- Solid understanding of security threats, attack vectors, and appropriate security controls.
- Excellent problem-solving and analytical skills.
- Strong communication and interpersonal skills to convey complex security concepts to diverse audiences.
- Familiarity with security frameworks such as NIST, ISO 27001, and GDPR.
- Relevant cybersecurity certifications (e.g., CISSP, CEH) are a plus.
What we offer:
- Competitive salary and performance-based bonuses.
- Comprehensive benefits package including health, dental, and retirement plans.
- Opportunities for professional development and continuous learning.
- Collaborative and inclusive work environment.
Top Skills
What We Do
At Johnson Controls, we transform the environments where people live, work, learn and play. From optimizing building performance to improving safety and enhancing comfort, we drive the outcomes that matter most. Dedicated to protecting the environment, we deliver our promise in industries such as healthcare, education, data centers and manufacturing. With a global team of 100,000 experts in more than 150 countries and over 130 years of innovation, we are the power behind our customers’ mission.
Our leading portfolio of building technology and solutions includes some of the most trusted names in the industry, such as Tyco®, York®, Metasys®, Ruskin®, Titus®, Frick®, Penn®, Sabroe®, Simplex®, Ansul® and Grinnell®.
