Penetration Tester (IoT)

Qualysec Technologies Pvt. Ltd.; Khordha; On-site; INR 600,000 - 1,200,000; Full time

Benefits offered by this job

Bonuses

Paid time off

Lunch at workplace

L&D programs

Career growth

Awards

Team events

Job summary

Qualysec Technologies Pvt. Ltd. in Bhubaneswar is seeking a Penetration Tester (IoT) to join our security team.

You will perform security testing on IoT devices, embedded firmware, hardware interfaces, and IoT communication protocols, identifying vulnerabilities and providing remediation guidance. The role emphasizes end-to-end testing across consumer, industrial, medical, automotive, and smart infrastructure devices, with opportunities to work on cutting-edge cybersecurity and SaaS projects.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 0–3 years of hands-on experience in IoT/embedded security or penetration testing.
• Location: Bhubaneswar; Full-time employment.

Responsibilities

• Perform end-to-end penetration testing on IoT and embedded devices (consumer, industrial, medical, automotive, smart infrastructure).
• Test device hardware, firmware, bootloaders, and embedded OSs.
• Conduct internal/external audits, risk assessments, and remediation activities.
• Test mobile apps, APIs, and cloud backends connected to IoT devices.
• Evaluate secure boot, OTA updates, and cryptographic implementations.
• Identify vulnerabilities and provide actionable remediation guidance.
• Produce clear technical and executive-level security reports.
• Stay updated on IoT threats and attack techniques.

Skills

IoT security

Embedded systems

Firmware analysis

Hardware interfaces

Radio protocols

Embedded architectures

Exploit development

Documentation

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field

Job description

Qualysec Technologies is seeking a skilled and motivated Penetration Tester (IoT) to join our security team in Bhubaneswar. The role involves performing security testing on IoT devices, embedded firmware, hardware interfaces, and IoT communication protocols, identifying vulnerabilities, and providing actionable remediation guidance.

About Us:

Qualysec Technologies is a cybersecurity company specializing in Web & Mobile Penetration Testing, Source Code Review, IoT, and Cloud Security, helping organizations strengthen their security posture.
Since 2020, we've delivered security consulting to global clients across Finance,Government, Healthcare, Insurance, and emerging tech sectors like AI/ML, IoT, and Blockchain. Our expert team leverages modern methodologies to protect critical assets.
We foster a growth mindset, enable fast career progression, encourage open feedback, and support continuous skill development.
Qualysec - Securing systems, building careers.

• Qualification:- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Experience:- 0 to 3 years of hands-on experience in IoT / embedded systems security or penetration testing.
• Location:- Bhubaneswar
• Job Type:- Full time

Responsibilities

• Perform end-to-end penetration testing on all types of IoT and embedded devices, including consumer, industrial, medical, automotive, and smart infrastructure devices.
• Test device hardware, firmware, bootloaders, and embedded operating systems.
• Conduct internal/external audits, risk assessments, vendor assessments, and compliance gap remediation activities.
• Conduct mobile app, API, and cloud backend testing connected to IoT devices.
• Perform secure boot, OTA update, and cryptographic implementation testing.
• Identify hardware, firmware, and software vulnerabilities and provide remediation guidance.
• Produce clear technical and executive-level security reports.
• Stay up to date with emerging IoT threats, vulnerabilities, and attack techniques.

Skills Required

• Ability to assess any IoT or embedded platform, including RTOS, Linux-based, and bare-metal systems.
• Strong experience with firmware extraction, analysis, and reverse engineering.
• Hands-on knowledge of hardware interfaces (UART, JTAG, SWD, SPI, I2C)
• Experience with radio and protocol analysis.
• Solid understanding of embedded architectures (ARM, MIPS, RISC-V).
• Familiarity with common Pentesting tools and custom exploit development.
• Strong documentation and communication skills.
• Compensation & Benefits: Competitive salary with performance-based bonuses, and on-time payments.
• Work-Life Balance: Paid time off, holidays, leave encashment, and lunch at the workplace.
• Learning & Career Growth: Regular L&D sessions, free access to online courses, fast-track career growth, and opportunities in a high-growth environment.
• Rewards & Recognition: Performance-based hikes, and monthly & annual awards.
• Culture & Environment: Fun Saturday activities, annual outings, open and supportive culture, and opportunities to work on cutting-edge cybersecurity and SaaS projects.