Senior Engineer - Embedded Product Security

Stryker; Gurugram District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Stryker is seeking a professional in Gurugram, India, for a role focused on vulnerability assessment and penetration testing of embedded devices. The position requires an understanding of both hardware and communication mechanisms, with responsibilities including threat modeling and performing attacks on USB and Ethernet interfaces.

The ideal candidate will have a Bachelor’s degree in Software or Electronics Engineering and 2–7 years of hands-on experience using tools like Kali or Nessus.

Qualifications

• 2–7 years of hands-on experience in vulnerability and penetration testing.
• Experience with automation using Jenkins and scripting languages.

Responsibilities

• Understand the product’s internal and communication mechanisms.
• Identify actors and the entity boundary through threat modeling.
• Analyze firmware and conduct vulnerability assessments.
• Perform attacks on interfaces such as USB and Ethernet.

Skills

Vulnerability and penetration testing

Scripting (PowerShell, Ruby, Python)

Hardware and radio security testing

Using tools like Kali, Nessus, BurpSuite, Qualys

Education

Bachelor’s degree in Software, Electronics Engineering, or equivalent

Job description

Responsibilities

• Initial Reconnaissance – Understand the product’s internal and communication mechanisms.
• Threat Modelling – Identify actors and the entity boundary.
• Protocol Endpoints – Read and understand protocol specifications, gather sample protocol implementations and simulators, test with the simulators, and write scripts to interact with the device.
• Firmware Vulnerability Analysis – Extract and analyze firmware, conduct vulnerability analysis, reverse binaries manually, and understand the firmware update process.
• Hardware Vulnerability Analysis – Identify and analyze hardware debug ports, extract and analyze memory, and perform malicious data injection.
• Manage all facets of vulnerability assessment and penetration testing involving embedded devices.
• Perform attacks and identify vulnerabilities on interfaces such as USB and Ethernet.
• Expertise and familiarity with hardware and radio security testing: UART, Wi‑Fi, MQTT, radio, JTAG, etc.

Required Qualifications

• Bachelor’s degree in Software, Electronics Engineering, or an equivalent field.
• 2–7 years of hands‑on experience in vulnerability and penetration testing with tools such as Kali, Nessus, BurpSuite, Qualys, etc.
• Experience automating routine tasks using Jenkins and/or scripting languages such as PowerShell, Ruby, or Python.

Preferred Qualifications

• Understanding of cloud‑based environments such as Azure and AWS.
• At least one professional certification (e.g., ECSA Practical, CPENT, LPT, OSCP, OSWE, OSCE) that involves practical exams.
• Flexible, independent, and self‑motivated.
• Excellent communication and interpersonal skills.
• Prior work experience in medical devices.