5 months ago
Gurgaon, IndiaMid Level / Senior
Responsibilities
- Perform initial reconnaissance of product internals and communication mechanisms.
- Conduct threat modeling, including identification of actors and entity boundaries.
- Analyze protocol specifications, gather sample implementations and simulators, test with simulators, and write scripts to interact with device firmware.
- Extract and analyze firmware, perform vulnerability analysis and manual binary reversing, and understand firmware update processes.
- Identify and analyze hardware debug ports, perform memory extraction and analysis, and conduct malicious data injection.
- Manage vulnerability assessment and penetration testing involving embedded devices.
- Perform attacks and identify vulnerabilities across USB, Ethernet, UART, Wi-Fi, MQTT, radio, and JTAG interfaces.
- Automate routine security tasks using Jenkins and scripting languages.
Requirements
- Bachelor’s degree in Software Engineering, Electronics Engineering, or an equivalent degree.
- 2–7 years of hands-on experience in vulnerability and penetration testing.
- Experience using tools such as Kali, Nessus, Burp Suite, and Qualys.
- Experience automating routine tasks with Jenkins and/or PowerShell, Ruby, or Python.
- Ability to work flexibly, independently, and in a self-motivated manner.
- Excellent communication and interpersonal skills.
Benefits
- Hybrid work flexibility.
- Approximately 20% travel.
- Preferred familiarity with Azure and AWS cloud environments.
- Preferred practical security certification such as ECSA Practical, CPENT, LPT, OSCP, OSWE, OSCE, or similar.
- Prior medical-device experience is considered a plus.
About Stryker
Stryker designs and manufactures medical devices and equipment for hospitals and surgeons, spanning orthopaedic implants, trauma and spine hardware, surgical tools, endoscopy, navigation, and patient care equipment. The NYSE-listed company, founded in 1941 and headquartered in Kalamazoo, Michigan, sells products and related services worldwide to health systems and ambulatory centers. It reported $22.6 billion in 2024 sales and markets its portfolio across roughly 75 countries.