Senior Engineer - Embedded Product Security

Stryker Group; Gurugram District; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

A leading technology firm located in Gurugram District is seeking a skilled professional to conduct vulnerability assessments and penetration testing on embedded devices. The ideal candidate will have a bachelor’s degree in Software or Electronics Engineering and 2-7 years of experience in related roles. Familiarity with cloud environments such as Azure and AWS is preferred. This position requires expertise in various testing tools and strong communication skills.

Qualifications

• 2-7 years of hands-on experience in Vulnerability and Penetration Testing.
• Experience in automation using tools like Jenkins.
• At least one professional certification involving practical exams.

Responsibilities

• Understand the product’s internal as well as communication mechanism.
• Identify actors and entity boundary for threat modeling.
• Analyze hardware vulnerabilities and perform firmware analysis.
• Conduct vulnerability assessments and penetration testing.

Skills

Vulnerability and Penetration Testing

Scripting languages (PowerShell, Ruby, Python)

Kali, Nessus, Burpsuite, Qualys

Cloud environments (Azure, AWS)

Hardware & Radio Security Testing

Education

Bachelor’s in Software/Electronics Engineering or equivalent

Job description

What you will do:

• Initial Reconnaissance - Understand product’s internal as well as communication mechanism

• Threat Modelling - Identification of Actors and Entity Boundary

• Protocol Endpoints - Read/Understand Protocol Specification, Gather Sample Protocol Implementations & Protocol Simulators, Testing with the Simulators and ability to write Scripts to Interact with The device

• Firmware Vulnerability Analysis - Firmware Extraction and Analysing Firmware, Vulnerability Analysis, Manual Reversing of Binaries, Understand Firmware Update Process

• Hardware Vulnerability Analysis - Identify and analyse Hardware Debug ports, Memory extraction and analysis, Malicious data injection

• Manage all facets of Vulnerability Assessment and Penetration testing involving embedded devices.

• Perform attacks and identify vulnerabilities on interfaces like USB, Ethernet etc.

• Expertise/Familiarity with Hardware & Radio Security Testing:- UART, Wi-Fi testing, MQTT testing, Radio testing, JTAG etc.

What you need:

Required Qualifications:

• Bachelor’s in Software/Electronics Engineering or equivalent degree.

• 2-7 years of hands‑on experience in Vulnerability and Penetration Testing using tools like Kali, Nessus, Burpsuite, Qualys etc.

• Experience in automation of routine tasks using tools like Jenkins and/or scripting languages such as PowerShell, Ruby or Python.

Preferred Qualifications:

• Understanding of Cloud based environments like Azure and AWS.

• At least one professional certification like ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE or similar involving practical exams.

• Must be flexible, independent and self‑motivated.

• Excellent communication and interpersonal skills.

• Good to have: Prior work experience in medical devices.