Title: Cyber security

Location:Navi Mumbai(Airoli or nearby location)

Work from Office - 5days a week

We are looking for an experienced Senior Device Cyber Security Assessment Specialist with 8+ years of hands-on experience in conducting comprehensive security assessments across a wide range of connected and non-connected devices. The candidate will be responsible for identifying vulnerabilities, testing firmware, hardware, and software security across diverse device categories including network equipment such as routers, switches, firewalls and access points; non-network devices such as standalone controllers and industrial sensors; kiosk systems including self-service terminals, payment kiosks and ticketing machines; tablets and mobile devices including enterprise and ruggedized tablets and handheld terminals; industrial peripherals such as tyre inflators, air compressors, fuel dispensers, EV chargers and vending machines; IoT and smart devices; POS and payment terminals; and embedded systems. The role requires deep technical expertise in firmware reverse engineering, hardware hacking, protocol analysis, wireless security testing, and the ability to map findings to global security standards. The ideal candidate should possess a strong research mindset, ability to work independently, and experience in communicating complex security findings to both technical and executive stakeholders.

Key responsibilities:

• Conduct end-to-end cyber security assessments and penetration testing of network devices such as routers, switches, firewalls, modems, gateways and access points, non-network devices, kiosk systems, tablets, industrial peripherals such as tyre inflators, EV chargers, vending machines and fuel dispensers, IoT devices, and embedded systems





• Perform firmware security analysis including firmware extraction, reverse engineering, binary analysis, hardcoded credential detection, and OTA update mechanism testing

• Conduct hardware security testing including JTAG and SWD debug interface probing, UART analysis, bus sniffing covering SPI and I2C, chip-off analysis, and side-channel attack assessment

• Execute wireless and RF security assessments covering Bluetooth, BLE, NFC, RFID, Wi-Fi, Zigbee, Z-Wave, LoRaWAN, and cellular 4G/5G protocols

• Test device-to-cloud communication security including API security, authentication mechanisms, encryption validation, and command injection testing

• Assess physical security aspects including tamper resistance, USB port security, boot process integrity, and secure boot validation

• Perform threat modeling for new devices and participate in secure design reviews during product development lifecycle

• Prepare detailed security assessment reports with CVSS risk ratings, proof-of-concept exploits, executive summaries, and actionable remediation roadmaps

• Map findings to relevant standards such as OWASP IoT Top 10, ETSI EN 303 645, IEC 62443, NIST IR 8259, PCI-DSS for payment devices, and DPDP Act 2023

• Develop device security baselines, hardening guidelines, and maintain a device vulnerability knowledge base

• Track and validate remediation efforts by OEMs and vendors

• Support procurement security evaluations for recent device acquisitions

• Mentor junior team members and contribute to building device security testing capability within the organization

CandidateID

Candidtae Name

Contact No

Email - ID

Level

Qualification

Total Exp

Rel Exp

Company Name

Notice Period

Current Location

Pref Loc

Current fixed

Variable Pay

Expected

Remarks

📌 Cyber Security (Navi Mumbai)
🏢 Vinovaai Private
📍 Navi Mumbai