Security Test Engineer

We are seeking an experienced Penetration Tester - Leader to perform offensive security testing on embedded devices (automotive or medical device or Iot) , network devices, network IT/OT infrastructure & backend/cloud applications. The role involves identifying security vulnerabilities through manual and automated penetration testing, reverse engineering in compliance with industry-specific cybersecurity standards (Automotive, Healthcare, OT, IT) and project requirements.
Key Responsibilities
Perform Threat analysis and risk assessment
Conduct security assessments on:
Embedded/ IOT devices
Cloud/Web apps
IT/OT infrastructure
Android & iOS apps
Perform firmware extraction, analysis, and reverse engineering
Identify, exploit, and document vulnerabilities with clear risk and remediation guidance
Collaborate with development and system teams to validate fixes and retest vulnerabilities
Prepare penetration test reports for customers and internal stakeholders
Knowledge of secure coding flaws
Technical Skills
Strong hands-on experience in penetration testing methodologies
Proficiency with Kali Linux and Linux-based testing environments
Hands-on usage of tools such as:
Burp Suite
Metasploit
Nmap
Wireshark
Ghidra / IDA Pro
Experience in reverse engineering of embedded firmware (ARM, PowerPC, TriCore, etc.)
Familiarity with bootloaders, secure boot, and firmware update mechanisms
Understanding of hardware attack surfaces and mitigation techniques
Tools & Platforms
Kali Linux, Ubuntu, embedded Linux
Burp Suite, Wireshark, Nmap, Metasploit
Ghidra, IDA Pro, Binwalk
Python / Bash scripting for automation (preferred)
Certifications (Preferred)
Demonstrate strong offensive security capabilities supported by industry‑recognized certifications and verifiable achievements, including:
Proven presence in leading Security Hall of Fame / Acknowledgment Lists from global technology vendors (e.g. Bugcrowd, HackerOne).
Preferred certifications are
CREST Certified Tester (CCT / CRT / CCT-INF)
OSCP / OSWE / GWAPT
Offensive Security or INE/eLearnSecurity certifications, such as: OSEP, ejpt, eCPPT, eWPT/eWPTX, eCPTX
Documented contribution to the cybersecurity community through published CVEs listed under the candidate’s name. Participation in responsible disclosure programs with publicly available acknowledgements or awards.
Demonstrated excellence through participation in national and international cybersecurity hackathons and completion of advanced CTF challenges. Achieved top‑tier rankings on offensive‑training platforms such as Hack The Box, TryHackMe, and other similar competitive environments.
Strong portfolio of security research, exploit development, vulnerability analysis, or open-source security tool contributions.
Standards & Framework Awareness
OWASP Testing Methodology
Familiarity with Threat Analysis and Risk Assessment and threat-based testing
Behavioral & Professional Skills
Strong analytical and problem-solving skills
Ability to think like an attacker and communicate risk clearly
Excellent technical documentation and reporting skills
Comfortable with customer-facing discussions and technical reviews
Ability to work independently and in cross-functional teams

Work arrangement
No