Role & responsibilities

Key Responsibilities

• Conduct security architecture reviews and threat modeling for embedded device platforms (RTOS, Linux, Android, QNX).

• Perform vulnerability assessments, firmware analysis, and penetration testing for automotive ECUs, medical IoT devices, and OTT devices.

• Guide secure boot, firmware encryption, key management, and secure update (OTA) mechanisms.

• Evaluate and integrate hardware security modules (HSM, TPM, SE) and trusted execution environments (TEE).

• Support secure coding practices for C/C++/Python embedded codebases; define and enforce MISRA and CERT guidelines where applicable.

• Lead implementation of compliance frameworks such as ISO 21434 (Automotive), FDA Cybersecurity Guidance (Medical), and OWASP IoT standards.

• Conduct static and dynamic application security testing (SAST, DAST, SCA) for embedded code and third-party software. Vulnerability management across life cycle of the Products.





• Coordinate with compliance and validation teams for cybersecurity documentation, SBOM generation, and vulnerability disclosure tracking.

• Perform risk analysis for connected interfaces (CAN, BLE, Wi-Fi, Ethernet, USB, HDMI, etc.) and recommend mitigations.

• Mentor junior engineers and advise on security design patterns across product development teams.

Required Skills and Competencies

• Robust knowledge of embedded Linux/RTOS internals, bootloaders, and kernel-level security.

• Hands-on experience with tools like IDA Pro, Ghidra, Binary Ninja, Wireshark, and firmware extraction utilities (JTAG, UART).

• Understanding of cryptographic algorithms, PKI, and key provisioning workflows.

• Familiarity with secure communication protocols (TLS, DTLS, MQTT, CAN-FD security).

• Experience performing fuzz testing, binary analysis, and reverse engineering for firmware validation.

📌 Opening For Healthcare embedded cybersecurity Pune
🏢 Staffing Services
📍 Pune