Opening For Healthcare embedded cybersecurity Pune

Staffing Services; Pune District; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Résumé du poste

Staffing Services is seeking an experienced embedded security specialist to conduct security architecture reviews and threat modeling for platforms like RTOS, Linux, Android, and QNX. You will perform vulnerability assessments, firmware analysis, and penetration testing across automotive ECUs, medical IoT, and OTT devices.

Responsibilities include guiding secure boot, OTA updates, HSM/TEE integration, and cryptographic provisioning.

Qualifications

• Strong knowledge of embedded Linux/RTOS internals, bootloaders, and kernel-level security.
• Hands-on experience with firmware extraction and analysis tools.
• Understanding of cryptographic algorithms, PKI, and key provisioning workflows.
• Familiarity with secure communication protocols (TLS/DTLS/MQTT/CAN-FD security).
• Experience with fuzz testing, binary analysis, and reverse engineering for firmware validation.

Responsabilités

• Conduct security architecture reviews and threat modeling for embedded device platforms (RTOS, Linux, Android, QNX).
• Perform vulnerability assessments, firmware analysis, and penetration testing for automotive ECUs, medical IoT devices, and OTT devices.
• Guide secure boot, firmware encryption, key management, and secure update (OTA) mechanisms.
• Evaluate and integrate hardware security modules (HSM, TPM, SE) and trusted execution environments (TEE).
• Support secure coding practices for C/C++/Python embedded codebases; define and enforce MISRA and CERT guidelines where applicable.
• Lead implementation of compliance frameworks such as ISO 21434 (Automotive), FDA Cybersecurity Guidance (Medical), and OWASP IoT standards.
• Conduct static and dynamic application security testing (SAST, DAST, SCA) for embedded code and third-party software. Vulnerability management across life cycle of the Products.
• Coordinate with compliance and validation teams for cybersecurity documentation, SBOM generation, and vulnerability disclosure tracking.
• Perform risk analysis for connected interfaces (CAN, BLE, Wi-Fi, Ethernet, USB, HDMI, etc.) and recommend mitigations.
• Mentor junior engineers and advise on security design patterns across product development teams.

Connaissances

Embedded security

Linux security

Bootloaders

Cryptography PKI

TLS security

Fuzz testing

Reverse engineering

Outils

IDA Pro

Ghidra

Binary Ninja

Wireshark

Firmware extraction tools

Description du poste

Role & responsibilities

Key Responsibilities

• Conduct security architecture reviews and threat modeling for embedded device platforms (RTOS, Linux, Android, QNX).
• Perform vulnerability assessments, firmware analysis, and penetration testing for automotive ECUs, medical IoT devices, and OTT devices.
• Guide secure boot, firmware encryption, key management, and secure update (OTA) mechanisms.
• Evaluate and integrate hardware security modules (HSM, TPM, SE) and trusted execution environments (TEE).
• Support secure coding practices for C/C++/Python embedded codebases; define and enforce MISRA and CERT guidelines where applicable.
• Lead implementation of compliance frameworks such as ISO 21434 (Automotive), FDA Cybersecurity Guidance (Medical), and OWASP IoT standards.
• Conduct static and dynamic application security testing (SAST, DAST, SCA) for embedded code and third-party software. Vulnerability management across life cycle of the Products.
• Coordinate with compliance and validation teams for cybersecurity documentation, SBOM generation, and vulnerability disclosure tracking.
• Perform risk analysis for connected interfaces (CAN, BLE, Wi-Fi, Ethernet, USB, HDMI, etc.) and recommend mitigations.
• Mentor junior engineers and advise on security design patterns across product development teams.

Required Skills and Competencies

• Strong knowledge of embedded Linux/RTOS internals, bootloaders, and kernel-level security.
• Hands-on experience with tools like IDA Pro, Ghidra, Binary Ninja, Wireshark, and firmware extraction utilities (JTAG, UART).
• Understanding of cryptographic algorithms, PKI, and key provisioning workflows.
• Familiarity with secure communication protocols (TLS, DTLS, MQTT, CAN-FD security).
• Experience performing fuzz testing, binary analysis, and reverse engineering for firmware validation.