Security Test Engineer

Cyient Limited; Pune District; Sur place; INR 2 600 000 - 4 200 000; Plein temps

Résumé du poste

Cyient Limited is seeking an experienced Penetration Tester - Leader to perform offensive security testing across embedded devices (automotive, medical devices, IoT), network devices, and backend/cloud applications. The role involves identifying vulnerabilities through manual and automated testing, reverse engineering, and complying with industry standards for Automotive, Healthcare, OT, and IT.

The candidate will lead threat analysis, risk assessment, and collaboration with development teams to

Qualifications

• Experience in offensive security testing on embedded devices (IoT/Automotive/Medical).
• Proficient with Kali Linux and Linux-based testing environments.
• Hands-on use of Burp Suite, Metasploit, Nmap, Wireshark, and reverse engineering tools.

Responsabilités

• Perform threat analysis and risk assessment.
• Assess security on embedded/IoT devices, cloud apps, and IT/OT infrastructure.
• Conduct firmware extraction, analysis, and reverse engineering.
• Identify, exploit, and document vulnerabilities with remediation guidance.
• Collaborate with teams to validate fixes and retest vulnerabilities.
• Prepare penetration test reports for customers and internal stakeholders.
• Demonstrate knowledge of secure coding flaws.

Connaissances

Penetration testing methodologies

Kali Linux

Linux

Burp Suite

Metasploit

Nmap

Wireshark

Ghidra / IDA Pro

Firmware reverse engineering

Embedded security testing

Outils

Binwalk

Python scripting

Bash scripting

Ghidra

IDA Pro

Burp Suite

Description du poste

We are seeking an experienced Penetration Tester - Leader to perform offensive security testing on embedded devices (automotive or medical device or Iot) , network devices, network IT/OT infrastructure & backend/cloud applications. The role involves identifying security vulnerabilities through manual and automated penetration testing, reverse engineering in compliance with industry-specific cybersecurity standards (Automotive, Healthcare, OT, IT) and project requirements.

We are seeking an experienced Penetration Tester - Leader to perform offensive security testing on embedded devices (automotive or medical device or Iot) , network devices, network IT/OT infrastructure & backend/cloud applications. The role involves identifying security vulnerabilities through manual and automated penetration testing, reverse engineering in compliance with industry-specific cybersecurity standards (Automotive, Healthcare, OT, IT) and project requirements.

Key Responsibilities

• Perform Threat analysis and risk assessment
• Conduct security assessments on:
  • Embedded/ IOT devices
  • Cloud/Web apps
  • IT/OT infrastructure
  • Android & iOS apps
• Perform firmware extraction, analysis, and reverse engineering
• Identify, exploit, and document vulnerabilities with clear risk and remediation guidance
• Collaborate with development and system teams to validate fixes and retest vulnerabilities
• Prepare penetration test reports for customers and internal stakeholders
• Knowledge of secure coding flaws

Technical Skills

• Strong hands‑on experience in penetration testing methodologies
• Proficiency with Kali Linux and Linux‑based testing environments
• Hands‑on usage of tools such as:
  • Burp Suite
  • Metasploit
  • Nmap
  • Wireshark
  • Ghidra / IDA Pro

• Experience in reverse engineering of embedded firmware (ARM, PowerPC, TriCore, etc.)
• Familiarity with bootloaders, secure boot, and firmware update mechanisms

• Understanding of hardware attack surfaces and mitigation techniques

Tools & Platforms

• Kali Linux, Ubuntu, embedded Linux
• Burp Suite, Wireshark, Nmap, Metasploit
• Ghidra, IDA Pro, Binwalk
• Python / Bash scripting for automation (preferred)

Certifications (Preferred)

Demonstrate strong offensive security capabilities supported by industry‑recognized certifications and verifiable achievements, including:

• Proven presence in leading Security Hall of Fame / Acknowledgement Lists from global technology vendors (e.g. Bugcrowd, HackerOne).
• Preferred certifications are:
  • CREST Certified Tester (CCT / CRT / CCT-INF)
  • OSCP / OSWE / GWAPT
  • Offensive Security or INE/eLearnSecurity certifications, such as: OSEP, ejpt, eCPPT, eWPT/eWPTX, eCPTX
• Documented contribution to the cybersecurity community through published CVEs listed under the candidate’s name. Participation in responsible disclosure programs with publicly available acknowledgements or awards.
• Demonstrated excellence through participation in national and international cybersecurity hackathons and completion of advanced CTF challenges. Achieved top‑tier rankings on offensive‑training platforms such as Hack The Box, TryHackMe, and other similar competitive environments.
• Strong portfolio of security research, exploit development, vulnerability analysis, or open‑source security tool contributions.

Standards & Framework Awareness

• OWASP Testing Methodology
• Familiarity with Threat Analysis and Risk Assessment and threat‑based testing

Behavioral & Professional Skills

• Strong analytical and problem‑solving skills
• Ability to think like an attacker and communicate risk clearlyli>Excellent technical documentation and reporting skills
• Comfortable with customer‑facing discussions and technical reviews
• Ability to work independently and in cross‑functional teams