Senior Engineer - Embedded Product Security
Stryker
Senior Engineer - Embedded Product Security
Job Description
Work Flexibility: HybridWhat you will do:Initial Reconnaissance - Understand product’s internal as well as communication mechanismThreat Modelling - Identification of Actors and Entity BoundaryProtocol Endpoints - Read/Understand Protocol Specification, Gather Sample Protocol Implementations & Protocol Simulators, Testing with the Simulators and ability to write Scripts to Interact with The deviceFirmware Vulnerability Analysis - Firmware Extraction and Analysing Firmware, Vulnerability Analysis, Manual Reversing of Binaries, Understand Firmware Update ProcessHardware Vulnerability Analysis - Identify and analyse Hardware Debug ports, Memory extraction and analysis, Malicious data injectionManage all facets of Vulnerability Assessment and Penetration testing involving embedded devices.Perform attacks and identify vulnerabilities on interfaces like USB, Ethernet etc.Expertise/Familiarity with Hardware & Radio Security Testing:- UART, Wi-Fi testing, MQTT testing, Radio testing, JTAG etc.What you need:Required Qualifications:Bachelor’s in Software/Electronics Engineering or equivalent degree.2-7 years of hands-on experience in Vulnerability and Penetration Testing using tools like Kali, Nessus, Burpsuite, Qualys etc.Experience in automation of routine tasks using tools like Jenkins and/or scripting languages such as PowerShell, Ruby or Python.Preferred Qualifications:Understanding of Cloud based environments like Azure and AWS.At least one professional certification like ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE or similar involving practical exams.Must be flexible, independent and self-motivated.Excellent communication and interpersonal skills.Good to have: Prior work experience in medical devices. Travel Percentage: 20%
Locations
- India, Gurugram
Skills Required
- Vulnerabilityintermediate
- medical devicesintermediate
Required Qualifications
- Bachelor’s in Software/Electronics Engineering or equivalent degree. (degree in software)
- 2-7 years of hands-on experience in Vulnerability and Penetration Testing using tools like Kali, Nessus, Burpsuite, Qualys etc. (experience, 7 years)
- Experience in automation of routine tasks using tools like Jenkins and/or scripting languages such as PowerShell, Ruby or Python. (experience)
- Bachelor’s in Software/Electronics Engineering or equivalent degree. (degree in software)
- 2-7 years of hands-on experience in Vulnerability and Penetration Testing using tools like Kali, Nessus, Burpsuite, Qualys etc. (experience, 7 years)
- Experience in automation of routine tasks using tools like Jenkins and/or scripting languages such as PowerShell, Ruby or Python. (experience)
Preferred Qualifications
- Understanding of Cloud based environments like Azure and AWS. (experience)
- At least one professional certification like ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE or similar involving practical exams. (certification)
- Must be flexible, independent and self-motivated. (experience)
- Excellent communication and interpersonal skills. (experience)
- Good to have: Prior work experience in medical devices. (experience)
- Understanding of Cloud based environments like Azure and AWS. (experience)
- At least one professional certification like ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE or similar involving practical exams. (certification)
- Must be flexible, independent and self-motivated. (experience)
- Excellent communication and interpersonal skills. (experience)
Responsibilities
- Initial Reconnaissance - Understand product’s internal as well as communication mechanism
- Threat Modelling - Identification of Actors and Entity Boundary
- Protocol Endpoints - Read/Understand Protocol Specification, Gather Sample Protocol Implementations & Protocol Simulators, Testing with the Simulators and ability to write Scripts to Interact with The device
- Firmware Vulnerability Analysis - Firmware Extraction and Analysing Firmware, Vulnerability Analysis, Manual Reversing of Binaries, Understand Firmware Update Process
- Hardware Vulnerability Analysis - Identify and analyse Hardware Debug ports, Memory extraction and analysis, Malicious data injection
- Manage all facets of Vulnerability Assessment and Penetration testing involving embedded devices.
- Perform attacks and identify vulnerabilities on interfaces like USB, Ethernet etc.
- Expertise/Familiarity with Hardware & Radio Security Testing:- UART, Wi-Fi testing, MQTT testing, Radio testing, JTAG etc.
- Initial Reconnaissance - Understand product’s internal as well as communication mechanism
- Threat Modelling - Identification of Actors and Entity Boundary
- Protocol Endpoints - Read/Understand Protocol Specification, Gather Sample Protocol Implementations & Protocol Simulators, Testing with the Simulators and ability to write Scripts to Interact with The device
- Firmware Vulnerability Analysis - Firmware Extraction and Analysing Firmware, Vulnerability Analysis, Manual Reversing of Binaries, Understand Firmware Update Process
- Hardware Vulnerability Analysis - Identify and analyse Hardware Debug ports, Memory extraction and analysis, Malicious data injection
- Manage all facets of Vulnerability Assessment and Penetration testing involving embedded devices.
- Perform attacks and identify vulnerabilities on interfaces like USB, Ethernet etc.
- Expertise/Familiarity with Hardware & Radio Security Testing:- UART, Wi-Fi testing, MQTT testing, Radio testing, JTAG etc.
Tags & Categories
Answer 10 quick questions to check your fit for Senior Engineer - Embedded Product Security @ Stryker.
10 Questions
~2 Minutes
Instant Score