Role: Product Security Engineer

Experience Range: 4 to 8 yrs

Job Location: Bangalore

Role Overview

Looking for a hands-on Product Security Engineer to perform penetration testing and vulnerability assessments across digital pathology, microscopy, and medical imaging systems.

The role involves securing embedded firmware, instrument control systems, Windows/Linux applications, web viewers, databases, and healthcare integrations while supporting regulatory cybersecurity compliance.

Key Responsibilities

- Conduct manual penetration testing across embedded devices, firmware, web applications, control PCs, and instrument interfaces
- Identify and exploit vulnerabilities in SQL databases, authentication mechanisms, APIs, and web-based image viewers.
- Assess security risks in DICOM/DICOMweb, HL7, LIS, and PACS integrations -_-
- Perform firmware analysis and embedded testing using interfaces such as JTAG, UART, and SPI.
- Collaborate with R&D; and product security teams on threat modelling, remediation, and vulnerability management
- Prepare detailed security reports and evidence to support FDA and EU MDR/IVDR regulatory submissions.





Required Skills & Experience

- 4+ years of experience in penetration testing or offensive security, covering both application and embedded systems
- Strong hands-on experience in manual penetration testing, firmware analysis, and exploit development.
- Proficiency in Python scripting and security testing tools
- Experience with SQL-backed applications, web viewers, medical imaging, or laboratory instrument software.
- Knowledge of medical device cybersecurity standards such as IEC 62443, IEC 81001-5-1, or FDA cybersecurity guidance
- OSCP certification is mandatory.

Preferred Qualifications

- Experience in medical device, digital pathology, microscopy, or healthcare security -
- Familiarity with DICOM, HL7, PACS, LIS, SBOM, and FDA 510(k)/PMA submissions.
- Additional certifications such as GPEN, GICSP, OSCE, GWAPT, or CEH -_-

Pay: ₹2,500,000.00 - ₹4,000,000.00 per year

Benefits:

- Adaptable schedule
- Food provided
- Provident Fund

Work Location: In person

📌 Product Security Engineer (Bengaluru)
🏢 Intropeer
📍 Bengaluru