Senior Security Engineer - IoT

About the role

Ognaj (eInfochips) is hiring a Senior Security Engineer for IoT in Ahmedabad, India. The role leads system-level vulnerability assessment and penetration testing of firmware, operating systems and embedded software, and works closely with compliance and engineering teams to prioritize remediation. It is a full-time position.

Key responsibilities

• Lead system-level VAPT of firmware, OS and embedded software, and develop test plans for secure update and patch validation.
• Analyze firmware statically and dynamically with tools such as Ghidra, Binwalk and Radare2, and validate secure boot and root of trust.
• Test OS hardening, access controls, rollback and patch management procedures, and run custom attack simulations.
• Identify and classify vulnerabilities using CVSS, and monitor CVE feeds to integrate new vulnerabilities and patches into testing.
• Collaborate with compliance and engineering teams, mentor junior engineers, and maintain a secure, isolated lab environment.
• Produce detailed technical reports and risk assessments, and ensure testing complies with standards such as RED 18031.

Required profile

• 2-6 years of experience in system security, embedded systems and vulnerability assessments.
• Bachelor's or Master's degree in Cybersecurity, Embedded Systems, Computer Engineering or a related field.
• Preferred certifications: OSCP, OSCE, GXPN or equivalent in ethical hacking, penetration testing or embedded security.
• Familiarity with ISO/IEC 62443, RED 18031 and IoT security frameworks.

Required skills

• Firmware analysis with Ghidra, Binwalk and Radare2, and firmware reverse engineering
• Embedded Linux, Yocto and OpenWRT, and OS hardening
• Secure boot testing and SBOM awareness
• Penetration testing with Metasploit, Kali Linux and custom tools
• Technical writing and reporting

What we offer

• Competitive salary and benefits package
• Career growth opportunities
• A focus on work-life balance and employee well-being