Cybersecurity Manager_MPIN

Key Responsibilties

Cybersecurity Manager is required to have the following 02 key responsibilities :-
1. Project Security Manager
\n • Support the IT Owner or Product Responsible Office in the implementation of the cybersecurity requirements, as per Cybersecurity related policies and procedures
\n • Support the creation and maintenance of cybersecurity relevant documentation
\n • Act as the first point of contact regarding cybersecurity within the team developing or operating the IT System or Bosch Product
\n • Distribute information regarding Cybersecurity related policies and procedures within the team developing or operating the IT System or Bosch Product
\n • Support decisions on how to proceed with cybersecurity-relevant changes, vulnerabilities, and cybersecurity incident response

2. Penetration Tester

• Scoping and execution of penetration tests against a variety of technologies including web application, mobile and infrastructure
\n • Simulate cyber attacks to identify system vulnerabilities
\n • Develop penetration testing methodologies
\n • Prepare detailed reports on the findings of penetration tests
\n • Recommend and implement improvements to security policies
\n • Keep abreast of the latest penetration testing tools and techniques
\n • Train staff on security awareness and procedures
\n • Collaborate with IT staff to improve system security
\n • Conduct security audits and provide recommendations for improvements
\n • Identify and report findings to management
\n • Act as the subject matter expert for the firm on all aspects of Penetration Testing

Required Competencies

As Project Security Manager
\n • Must have a suitable academic background, e.g., Bachelor's in Computer Science
\n • Must have the necessary communication and networking skills to communicate with the Project Teams, for both internal and external customers
\n • Deep understanding of the Cybersecurity related policies and procedures
\n • Any Three (03) of the following Domain-specific competencies :-
\n  Secure Software Development
\n  Security Testing
\n  Communication and Network Security
\n  Cloud security
\n  Web Security and Application Security
\n  Cryptography
\n  Identity and Access Management
\n  Security Architectures and Engineering
\n  Security of Connected Products
\n  Hardware Security
\n  Embedded Security

All of the following competencies :-
\n  Incident Response
\n  Risk Management
\n  Vulnerability Management
\n  Cybersecurity relevant Laws, Regulations, and Standards
\n  Product Liability
\n  Project Management Skills
\n  Knowledge of the Target Domain
\n  Knowledge of the MPS’s operational procedures along the product or IT System life cycle
\n  Leadership skills
\n  Communication and Moderation skills
\n  Cooperation and Networking skills
\n  Trainings and Coaching skills

As Penetration Tester
\n • Networking Fundamentals: Understanding TCP/IP, DNS, HTTP/HTTPS, routing, subnets, NAT, common ports and services is crucial for analyzing attack paths and understanding how data flows through networks
\n • Operating System Mastery: Proficiency in Linux and Windows is essential for handling various operating systems and their unique vulnerabilities
\n • Programming & Scripting: Skills in Python for automation and Bash for Linux workflows are valuable for building and managing penetration testing tools
\n • Web Application Security: Knowledge of OWASP Top 10 vulnerabilities, authentication flaws, session issues, SQL injection, cross-site scripting, and other web application security risks is critical
\n • Mobile Application Security: Knowledge of OWASP Top 10 vulnerabilities, and latest tools and techniques for Android and iOS App Penetration Testing
\n • Protocol Level Exploitation: Port Scanning, SQL Injection, DNS Spoofing, HTTP/HTTPS/TLS Attacks
\n • Cloud Security Basics: Understanding cloud security concepts, identity and access management, and storage exposure is important
\n • Tool Mastery: Familiarity with various penetration testing tools and the ability to perform manual testing and report findings is necessary. Mastery over following tools is mandatory :-
\n  Burpsuite
\n  Nessus
\n  OpenVAS
\n  Metasploit
\n  NMAP
\n • Communication & Report Writing: Effective communication and the ability to write clear and concise reports are essential for conveying findings and recommendations to clients
\n • Certifications (desirable): Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or CompTIA Security+ Secure