Senior Executive - Cyber Security.

TUV SUD South Asia; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

TUV SUD South Asia is seeking a security testing professional to lead IoT and Web pentesting projects from scoping to executive reporting. You will research vulnerabilities in medical device ecosystems, including firmware analysis, and mentor a skilled team to enhance technical expertise.

The role requires strong hands-on capabilities, deep knowledge of OWASP/NIST standards, and a passion for staying ahead with cutting-edge tools in the medical IoT space.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 2+ years IoT pentesting; 4+ years web/mobile/thick client security.
• Certifications: OSED, OSWP, OSEP, OSCP, HTB CPTS.
• Proficient with open-source and commercial pentesting tools.
• Excellent communication and time management; translate findings to risks.
• Independent, structured, and customer-focused work style.
• Basic understanding of medical device tech.
• Basic cybersecurity standards knowledge (OWASP, NIST).

Responsibilities

• Lead IoT and Web pentesting projects from scoping to reporting.
• Research and exploit vulnerabilities in medical device ecosystems.
• Mentor team and share exploits and research.
• Stay ahead with new tools in medical IoT pentesting.
• Develop internal tools and scripts for testing.

Skills

IoT pentesting

Web pentesting

Mobile pentesting

Thick-client pentesting

Education

Bachelor's degree in cybersecurity or related field

OSED

OSWP

OSEP

OSCP

HTB CPTS

Tools

Penetration testing tools

Job description

Your Tasks:

• Leading complex IoT and Web penetration testing projects independently, from initial scoping to technical exploitation and executive reporting.
• Researching, identifying, and exploiting vulnerabilities within medical device ecosystems, including firmware analysis and privilege escalation.
• Fostering a hands‑on "hacker culture" by actively sharing exploits, scripts, and research within a highly knowledgeable team and mentoring others to grow technically.
• Staying ahead of the curve by continuously exploring new tools and methods in the medical IoT penetration testing space.
• Developing and refining internal tools and scripts to ensure state‑of‑the‑art penetration testing.

Your Qualifications:

• Bachelors degree in cybersecurity, computer science, software engineering, general engineering, or a related technical field.
• Extensive professional experience: At least 2 years in IoT-related penetration testing, 4 years in web, mobile, and thick client application security assessments.
• Relevant high-level certifications such as OSED, OSWP, OSEP, OSCP, HTB CPTS.
• Deep technical expertise in using open-source and commercial penetration testing tools
• Excellent communication and time management skills, with the ability to translate technical findings into business risks.
• Independent, structured, and customer-oriented way of working with a high degree of problem-solving competence.
• Basic understanding of medical device technology
• Basic knowledge on cybersecurity standards (OWASP, NIST, etc.)