Device security specialist-Associate Director/Manager

Gips Management & Personnel Consultants; Navi Mumbai; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Gips Management & Personnel Consultants seeks an experienced Senior Device Cyber Security Assessment Specialist located in Navi Mumbai, India. This role requires over 8 years of hands-on experience in conducting comprehensive security assessments...

The ideal candidate will demonstrate deep technical expertise and a strong research mindset while mentoring junior team members and developing robust security solutions for diverse device categories.

Qualifications

• 8+ years of hands-on experience in cyber security assessments.
• Strong ability to communicate complex security findings.
• Deep technical expertise in security testing across multiple device categories.

Responsibilities

• Conduct end-to-end cyber security assessments of various devices.
• Perform firmware and hardware security analysis.
• Test device-to-cloud communication security and assess physical security.

Skills

Firmware reverse engineering

Hardware hacking

Protocol analysis

Wireless security testing

Cyber security assessments

Job description

JD for Device security specialist

We are looking for an experienced Senior Device Cyber Security Assessment Specialist with 8+ years of hands-on experience in conducting comprehensive security assessments across a wide range of connected and non-connected devices. The candidate will be responsible for identifying vulnerabilities, testing firmware, hardware, and software security across diverse device categories including network equipment such as routers, switches, firewalls and access points; non-network devices such as standalone controllers and industrial sensors; kiosk systems including self-service terminals, payment kiosks and ticketing machines; tablets and mobile devices including enterprise and ruggedized tablets and handheld terminals; industrial peripherals such as tyre inflators, air compressors, fuel dispensers, EV chargers and vending machines; IoT and smart devices; POS and payment terminals; and embedded systems. The role requires deep technical expertise in firmware reverse engineering, hardware hacking, protocol analysis, wireless security testing, and the ability to map findings to global security standards. The ideal candidate should possess a strong research mindset, ability to work independently, and experience in communicating complex security findings to both technical and executive stakeholders.

Key responsibilities

• Conduct end-to-end cyber security assessments and penetration testing of network devices such as routers, switches, firewalls, modems, gateways and access points, non-network devices, kiosk systems, tablets, industrial peripherals such as tyre inflators, EV chargers, vending machines and fuel dispensers, IoT devices, and embedded systems
• Perform firmware security analysis including firmware extraction, reverse engineering, binary analysis, hardcoded credential detection, and OTA update mechanism testing
• Conduct hardware security testing including JTAG and SWD debug interface probing, UART analysis, bus sniffing covering SPI and I2C, chip-off analysis, and side-channel attack assessment
• Execute wireless and RF security assessments covering Bluetooth, BLE, NFC, RFID, Wi-Fi, Zigbee, Z-Wave, LoRaWAN, and cellular 4G/5G protocols
• Test device-to-cloud communication security including API security, authentication mechanisms, encryption validation, and command injection testing
• Assess physical security aspects including tamper resistance, USB port security, boot process integrity, and secure boot validation
• Perform threat modeling for new devices and participate in secure design reviews during product development lifecycle
• Prepare detailed security assessment reports with CVSS risk ratings, proof-of-concept exploits, executive summaries, and actionable remediation roadmaps
• Map findings to relevant standards such as OWASP IoT Top 10, ETSI EN 303 645, IEC 62443, NIST IR 8259, PCI-DSS for payment devices, and DPDP Act 2023
• Develop device security baselines, hardening guidelines, and maintain a device vulnerability knowledge base
• Track and validate remediation efforts by OEMs and vendors
• Support procurement security evaluations for new device acquisitions
• Mentor junior team members and contribute to building device security testing capability within the organization