We are seeking an experienced Penetration Tester - Leader to perform offensive security testing on embedded devices (automotive or medical device or Iot) , network devices, network IT/OT infrastructure & backend/cloud applications. The role involves identifying security vulnerabilities through manual and automated penetration testing, reverse engineering in compliance with industry-specific cybersecurity standards (Automotive, Healthcare, OT, IT) and project requirements.
Key Responsibilities
-
Perform Threat analysis and risk assessment
-
Conduct security assessments on:
-
Embedded/ IOT devices
-
Cloud/Web apps
-
IT/OT infrastructure
-
Android & iOS apps
-
Perform firmware extraction, analysis, and reverse engineering
-
Identify, exploit, and document vulnerabilities with clear risk and remediation guidance
-
Collaborate with development and system teams to validate fixes and retest vulnerabilities
-
Prepare penetration test reports for customers and internal stakeholders
-
Knowledge of secure coding flaws
Technical Skills
-
Strong hands-on experience in penetration testing methodologies
-
Proficiency with Kali Linux and Linux-based testing environments
-
Hands-on usage of tools such as:
-
Burp Suite
-
Metasploit
-
Nmap
-
Wireshark
-
Ghidra / IDA Pro
-
Experience in reverse engineering of embedded firmware (ARM, PowerPC, TriCore, etc.)
-
Familiarity with bootloaders, secure boot, and firmware update mechanisms
-
Understanding of hardware attack surfaces and mitigation techniques
Tools & Platforms
-
Kali Linux, Ubuntu, embedded Linux
-
Burp Suite, Wireshark, Nmap, Metasploit
-
Ghidra, IDA Pro, Binwalk
-
Python / Bash scripting for automation (preferred)
Certifications (Preferred)
Demonstrate strong offensive security capabilities supported by industry‑recognized certifications and verifiable achievements, including:
-
Proven presence in leading Security Hall of Fame / Acknowledgment Lists from global technology vendors (e.g. Bugcrowd, HackerOne).
-
Preferred certifications are
-
CREST Certified Tester (CCT / CRT / CCT-INF)
-
OSCP / OSWE / GWAPT
-
Offensive Security or INE/eLearnSecurity certifications, such as: OSEP, ejpt, eCPPT, eWPT/eWPTX, eCPTX
-
Documented contribution to the cybersecurity community through published CVEs listed under the candidate’s name. Participation in responsible disclosure programs with publicly available acknowledgements or awards.
-
Demonstrated excellence through participation in national and international cybersecurity hackathons and completion of advanced CTF challenges. Achieved top‑tier rankings on offensive‑training platforms such as Hack The Box, TryHackMe, and other similar competitive environments.
-
Strong portfolio of security research, exploit development, vulnerability analysis, or open-source security tool contributions.
Standards & Framework Awareness
-
OWASP Testing Methodology
-
Familiarity with Threat Analysis and Risk Assessment and threat-based testing
Behavioral & Professional Skills
-
Strong analytical and problem-solving skills
-
Ability to think like an attacker and communicate risk clearly
-
Excellent technical documentation and reporting skills
-
Comfortable with customer-facing discussions and technical reviews
-
Ability to work independently and in cross-functional teams
