Position:

Job Description:

Experience:

5–8 years

Key Skills:

• Proficient in using Metasploit, Nmap, and Kali Linux for penetration testing

• Strong experience with firmware analysis tools such as Binwalk and Ghidra

• Knowledge of Linux hardening and secure configuration practices

• Familiarity with vulnerability scoring systems (CVSS) and CVE tracking

• Experience with patch verification and secure update testing

• Skilled in reverse engineering firmware images

• Proficient in scripting languages (Python, Bash) for automation

• Knowledge of embedded operating systems (Yocto, OpenWRT)

• Understanding of secure boot and rollback mechanisms

• Experience with static and dynamic vulnerability assessments

• Familiarity with hardware debugging interfaces (JTAG, UART)

• Ability to document findings and prepare technical reports

• Knowledge of SBOM analysis and patch management processes

• Ability to collaborate effectively with senior engineers

• Strong problem-solving and analytical skills

Responsibilities:

• Execute comprehensive VAPT on firmware and embedded OS components

• Conduct vulnerability scans and manual security testing on target devices

• Validate secure update, patch management, and rollback mechanisms

• Identify and document security misconfigurations and vulnerabilities

• Develop and execute test cases for detecting firmware-level vulnerabilities

• Perform both static and dynamic analysis on embedded systems

• Assist in reverse engineering of firmware to uncover potential exploits

• Support incident response and remediation efforts through detailed reporting

• Maintain and update test scripts and methodologies based on emerging threats

• Document test results and provide clear remediation recommendations

• Collaborate with System Security Lead on follow-up testing and validation

• Assist in training junior team members on system security best practices

• Ensure all testing aligns with RED 18031 and regulatory standards

• Provide regular status updates and technical reports to management

• Contribute to continuous improvement of the overall VAPT process

Qualifications & Certifications:
• Bachelor's degree in Computer Engineering, Cybersecurity, or related domain
• Preferred: CEH, CompTIA PenTest+, or equivalent certifications

Location:

Time Type:

Job Category: