Security Engineer – Platform security and compliance readiness

Project

Assess how industrial data moves between the customer environment, Nexa Edge, the Nexa cloud platform, and authorized users. Help the team identify security gaps, prioritize practical controls, and maintain evidence that can support customer security reviews.

Responsibilities

• Map data flows, trust boundaries, identities, and sensitive information across the web and mobile applications, APIs, cloud services, AI services, and edge connections.
• Create a threat model that considers tenant separation, customer IT/OT boundaries, edge devices, credentials, and data transfer.
• Review authentication and authorization, role-based access, API protections, secrets handling, encryption, audit logs, backups, dependencies, and deployment practices.
• Run only approved security checks in authorized test environments; document findings with severity, evidence, and a practical remediation path.
• Map relevant controls to an agreed security baseline and applicable privacy obligations. Identify evidence and owners for each control.

Expected deliverables

• Threat model and data-flow diagrams: Documented assets, boundaries, threats, assumptions, and risk scenarios.
• Prioritized risk register: Findings with severity, evidence, recommended treatment, owner, and status.
• Security baseline and evidence checklist: Controls, current state, evidence needed, owner, and next action.
• Selected implemented controls: A scoped set of fixes or automated checks reviewed with the engineering team, plus a concise incident and access-review recommendation.

Profile and skills

Final-year student in cybersecurity, computer science, networks, or cloud engineering. Understanding of web/API security, identity and access management, Linux, and networking, with the ability to write clear technical findings and work with software engineers.

Useful experience

AWS, OWASP guidance, IAM, security testing, DevSecOps, privacy engineering, and security frameworks.

Scope

This PFE supports security improvement and compliance readiness. It does not promise certification or a formal compliance audit. Testing is limited to systems and environments Nexa explicitly authorizes.

Shared program context

This is one of three coordinated end-of-studies projects contributing to a secure and context-aware industrial data integration path. The shared outcome is to connect industrial data to the right machine and operating context and make it useful to Nexa through a secure, repeatable integration path.