Senior Engineer - Embedded Product Security

About the role

Stryker is hiring a Senior Engineer for Embedded Product Security in Gurugram, working in a hybrid setup. The role covers vulnerability assessment and penetration testing of embedded devices, including firmware and hardware analysis.

Key responsibilities

• Perform initial reconnaissance of the product's internal and communication mechanisms.
• Carry out threat modelling, identifying actors and entity boundaries.
• Analyse protocol endpoints by reading specifications, gathering sample implementations and simulators, and writing scripts to interact with the device.
• Analyse firmware through extraction, reverse engineering of binaries and understanding of the update process.
• Analyse hardware, including debug ports, memory extraction and malicious data injection.
• Run vulnerability assessments and penetration tests on interfaces such as USB and Ethernet.
• Apply expertise in hardware and radio security testing, including UART, Wi-Fi, MQTT, radio and JTAG testing.

Required profile

• Bachelor's degree in software or electronics engineering or equivalent.
• 2-7 years of hands-on experience in vulnerability and penetration testing.
• Experience automating routine tasks with Jenkins and/or scripting languages such as PowerShell, Ruby or Python.
• Preferred: understanding of cloud environments such as Azure and AWS, and at least one practical certification such as ECSA Practical, CPENT, LPT, OSCP, OSWE or OSCE.
• Flexible, independent and self-motivated, with excellent communication and interpersonal skills.
• Good to have: prior experience in medical devices.

Required skills

• Vulnerability and penetration testing with tools such as Kali, Nessus, Burp Suite and Qualys.
• Firmware reverse engineering and binary analysis.
• Scripting with PowerShell, Ruby or Python.