AMI Security Engineer

C3i Hub; Kanpur; On-site; INR 800,000 - 1,400,000; Full time

Job summary

C3i Hub is seeking a security testing specialist to validate smart meter and NIC hardware, firmware, and AMI communications across multiple OEMs for vulnerabilities and protocol compliance.

The role involves hardware security testing, firmware analysis, and VAPT across meter, HES, and MDMS interfaces, with emphasis on secure boot, encryption, and authentication mechanisms.

Qualifications

• Experience with DLMS/COSEM testing (Gurux, Kalkitech, BCS, CMRI etc.)
• Embedded firmware validation and FOTA/OTA testing
• Exposure to firmware reverse engineering tools (Ghidra, Binwalk)
• Familiarity with penetration testing/vulnerability tools (Kali Linux, Burp Suite, Wireshark, Nmap, Nessus)
• Understanding hardware security (JTAG/SWD) and RF/SDR testing

Responsibilities

• Perform DLMS/COSEM protocol testing and firmware validation for meters/NICs from different OEMs
• Conduct hardware security testing including PCB analysis and firmware extraction
• Perform firmware reverse engineering and static/dynamic analysis to identify vulnerabilities
• Test RF/wireless and network communications for security gaps and protocol fuzzing
• Validate FOTA/OTA update security, secure boot, encryption, and authentication mechanisms
• Assess AMI channels (RF, cellular, PLC, Ethernet, optical) for risks of interception or tampering
• Test HES-MDMS interfaces for gaps and unauthorized access points
• Conduct vulnerability assessment and penetration testing on meter, HES, and MDMS interfaces

Skills

DLMS/COSEM testing

Firmware security testing

Firmware reverse engineering

Penetration testing concepts

Scripting basics

Tools

Ghidra

Binwalk

Kali Linux

Burp Suite

Wireshark

Nessus

Nmap

Job description

Role Summary

Test and validate smart meter/NIC hardware, firmware, and end-to-end AMI communication (Meter-NIC-HES-MDMS) across multiple OEMs for security vulnerabilities, protocol compliance, and cyber-attack resistance.

Key Responsibilities

• Perform DLMS/COSEM protocol testing and firmware validation for meters/NICs from different OEMs
• Conduct hardware security testing - PCB analysis, JTAG/SWD debugging, firmware extraction
• Perform firmware reverse engineering and static/dynamic analysis to identify vulnerabilities
• Test RF/wireless and network communication for security gaps (MITM, replay, packet injection, protocol fuzzing)
• Validate FOTA/OTA update security, secure boot, encryption, and authentication mechanisms
• Assess AMI communication channels (RF, cellular, PLC, Ethernet, optical) for interception, tampering, and data-integrity risks
• Test HES-meter and HES-MDMS communication/interfaces for security gaps and unauthorized access points
• Conduct vulnerability assessment penetration testing (VAPT) on meter, HES, and MDMS interfaces
• Recommend and implement security controls/fixes to close identified gaps across meter, communication, and HES/MDMS layers
• Analyse logs, traces, and firmware behaviour to identify defects and perform root cause analysis (RCA)
• Document test cases, VAPT findings, and OEM-wise security assessment reports
• Support compliance validation against IS 13779, IS 16444, CBIP-325, IEC 62056, IS 15959

Required Skills

• Hands-on experience with DLMS/COSEM testing (Gurux, Kalkitech, BCS, CMRI etc.)
• Embedded firmware validation, firmware flashing (Renesas or similar), FOTA/OTA testing
• Exposure to firmware reverse engineering tools (Ghidra, Binwalk etc.)
• Familiarity with penetration testing/vulnerability tools (Kali Linux, Burp Suite, Wireshark, Nmap, Nessus etc.)
• Understanding of hardware security (JTAG/SWD, chip-off etc.) and RF/SDR-based communication testing
• Knowledge of AMI communication technologies (RF, cellular, PLC, Ethernet, optical etc.) and associated security risks
• Understanding of HES/MDMS architecture, APIs, and interface security
• Knowledge of Scripting, encryption, authentication, and secure boot concepts

Required Skills

Binwalk Binwalk Ghidra

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.