Jobs

Interviews
Job Alerts
Tools

Upskill and Grow with AI

Mock Interview Practice interviews in realistic simulations

Coding Practice Improve your coding skills with challenges

Certification Earn certifications to validate your skills

AI Learning Get trained with AI expert sessions

Career Path AI insights for smarter career decisions

AI Job Match Score AI-Powered Job Match Against Your Resume and Optimize Your Resume

Career Tools and Resources

Resume Builder Build Professional Resume with Ease

ATS Friendliness Check Check Resume Friendliness for Applicant Tracking Systems

Auto Apply Apply to hundreds of jobs on any platform effortlessly

Co-Pilot (Chrome Extension) Your AI Assistant for Seamless Browsing Efficiency

Interview Questions Streamline interviews with ready-to-use questions

Salaries Discover market-driven salary insights across skillsets and geographies

Companies Explore leading companies actively hiring talent
For Employers

Home
>
Jobs in bengaluru
>
Cisco
>
Hardware Penetration Tester

Hardware Penetration Tester

Cisco

5 - 10 years

12 - 16 Lacs

bengaluru

Posted:1 day ago| Platform:

Apply

Skills Required

python network security oscp penetration testing methodologies ai operating systems ruby dast automation application security embedded systems linux penetration testing execution bash penetration testing sast firmware architecture

Work Mode

Work from Office

Job Type

Full Time

Job Description

Hardware Penetration Tester - 4+yrs - Python/Firmware extraction/JTAG,UART, SPI-testing

Who We Are:As the leader in cloud-managed IT and networking, Cisco connects passionate people to their mission by simplifying the digital workplace. Our impact is driven by the innovative, purposeful, and vibrant people who make up our inclusive community. When technology is intuitive and secure, our customers can focus on what matters!

About The Team:

Join our Device Penetration Testing team, where your expertise will directly strengthen the security of millions of Cisco devicesfrom embedded systems to global cloud platforms. Here, youll collaborate with security professionals recognized for leading hardware security training, being credited with multiple CVE discoveries, and achieving success in bug bounty programs.We are a highly technical, collaborative group passionate about dissecting complex technologies, uncovering critical vulnerabilities, and pushing the boundaries of whats possible to safeguard the infrastructure that powers the internet. If you thrive on solving tough technical challenges, get excited by impactful security discoveries, and value an environment built on knowledge sharing and continuous learning, youll feel right at home with us.

What You'll Do Day-to-Day:

As a Hardware Penetration Tester on our Device Penetration Testing team, you will:

Proactively engage in technical and hands-on security assessments, dissecting hardware, analyzing firmware, and identifying critical vulnerabilities in Cisco's latest devices and products still in development.
Perform in-depth analysis of hardware components and their interactions, including JTAG, UART, SPI, and I2C communication analysis, secure boot, and examining how firmware interacts with underlying hardware. Extract and analyze content from SPI flash and other on-board memory and audit the security of hardware protocols and communication interfaces as part of the analysis.
Focus on uncovering technically challenging and highly impactful vulnerabilities, directly contributing to the security and trustworthiness of Cisco's extensive product portfolio.
Engineer and implement novel exploit chains to bypass advanced hardware and firmware security mechanisms, demonstrating full compromise scenarios.
Conduct in-depth research into emerging hardware attack surfaces and develop innovative techniques for exploitation that push the boundaries of current security understanding.
Continuously enhance your offensive security skillset across a broad spectrum of targets, including web applications, embedded firmware, hardware components, and network protocols.
Document all identified vulnerabilities with comprehensive technical write-ups and collaborate directly with engineering teams to provide detailed insights, driving effective remediation throughout the product development lifecycle.
Leverage automation, custom scripting, and AI/ML technologies to accelerate vulnerability discovery, streamline security analysis workflows, and enhance testing capabilities across a diverse range of hardware and embedded systems.
Analyze recurring vulnerability patterns across diverse systems, translating these findings into actionable security insights and baseline test sets to influence secure design and prevent future vulnerabilities.

What We're Looking For:

A security-focused mindset with genuine passion for penetration testing and vulnerability research
Familiarity with firmware extraction techniques and methodologies
Strong understanding of embedded hardware interfaces and protocols
Expertise in conducting JTAG, UART, and SPI-based testing
Ability to identify and bypass hardware security mechanisms
Familiarity with embedded operating systems and architectures
Proficiency in programming and scripting (e.g., Python, C, Bash)
Experience with hardware debug tools and test equipment
Solid understanding of network security and penetration testing methodologies Bachelor's degree in Computer Science, Information Security, or 5+ years of related work experience
4+ years of hands-on experience in web application security, firmware security, embedded system penetration testing, authentication and security protocols
Working knowledge of industry frameworks:

* OWASP Web Security Testing Guide (WSTG)* OWASP IoT Security Testing Guide (ISTG)* Penetration Testing Execution Standard (PTES)

Strong written and verbal communication skillsyou can explain complex security issues clearly to both technical and non-technical audiences

Nice to Have:

Experience with source code security assessments and adjacency analysis in C/C++, Golang, Rust, or Ruby
Comfort working in Linux environments
Exposure to hardware injection attacks such as EMFI
Understanding of secure development lifecycle practices including threat modeling, code review, SAST, DAST, and security architecture review
OSCP or similar penetration testing certification
Experience participating in bug bounty programs or responsible disclosure initiatives

More Jobs at Cisco

Commercial Solutions Engineer - Cyber Security , Networking

Mumbai

10 - 15 yrs

INR 10 - 11 Lacs

Business Development Manager

Bengaluru

5 - 10 yrs

INR 8 - 13 Lacs

Electrical Product Engineer

Bengaluru

4 - 9 yrs

INR 15 - 17 Lacs

Test Automation Engineer

Bengaluru

1 - 3 yrs

INR 8 - 9 Lacs

ASIC Engineer | 5+ years | (Floor planning , Place and route , Formal verification , Timing closure , Perl / Python / Scripting )

Ahmedabad, Gujarat, India

Experience: Not specified

Salary: Not disclosed

Mock Interview

Practice Video Interview with JobPe AI

Start Python Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Enhance Your Python Skills

Practice Python coding challenges to boost your skills

Start Practicing Python Now

Cisco

Software Development

San Jose CA

Login to

Please Verify Your Phone or Email

Confirm Action

Hardware Penetration Tester