About the role

Aplyr's Quick Take

This role is for a Senior Engineer focused on embedded product security, primarily handling vulnerability assessments and penetration testing of embedded devices. You'll be analyzing firmware and hardware for security weaknesses and performing various tests on communication protocols. It's an individual contributor role that requires hands-on technical skills.

Good fit

Ideal candidates have 2-7 years of experience in security testing, particularly with embedded systems, and are comfortable with scripting and automation. A background in software or electronics engineering is essential, along with a self-motivated and flexible working style.

Worth noting

The position involves a significant amount of hands-on technical work, including manual reversing of binaries, which may not appeal to everyone. Additionally, prior experience in medical devices is a plus, but not required.

Work Flexibility: Hybrid

What you will do:

Initial Reconnaissance - Understand product’s internal as well as communication mechanism
Threat Modelling - Identification of Actors and Entity Boundary
Protocol Endpoints - Read/Understand Protocol Specification, Gather Sample Protocol Implementations & Protocol Simulators, Testing with the Simulators and ability to write Scripts to Interact with The device
Firmware Vulnerability Analysis - Firmware Extraction and Analysing Firmware, Vulnerability Analysis, Manual Reversing of Binaries, Understand Firmware Update Process
Hardware Vulnerability Analysis - Identify and analyse Hardware Debug ports, Memory extraction and analysis, Malicious data injection
Manage all facets of Vulnerability Assessment and Penetration testing involving embedded devices.
Perform attacks and identify vulnerabilities on interfaces like USB, Ethernet etc.
Expertise/Familiarity with Hardware & Radio Security Testing:- UART, Wi-Fi testing, MQTT testing, Radio testing, JTAG etc.

What you need:

Required Qualifications:

Bachelor’s in Software/Electronics Engineering or equivalent degree.
2-7 years of hands-on experience in Vulnerability and Penetration Testing using tools like Kali, Nessus, Burpsuite, Qualys etc.
Experience in automation of routine tasks using tools like Jenkins and/or scripting languages such as PowerShell, Ruby or Python.

Preferred Qualifications:

Understanding of Cloud based environments like Azure and AWS.
At least one professional certification like ECSA Practical/CPENT/LPT/OSCP/OSWE/OSCE or similar involving practical exams.
Must be flexible, independent and self-motivated.
Excellent communication and interpersonal skills.
Good to have: Prior work experience in medical devices.

Travel Percentage: 20%

Skills & Tags

product

Aplyr's read

Stryker excels in medical technology, attracting professionals passionate about innovation in orthopedics, surgical, and neurotechnology solutions.
Synthesized from recent postings & public sources

What's promising

•Stryker's innovative products lead advancements in orthopedics and neurotechnology.
•Global presence offers diverse career opportunities across multiple regions.
•Strong focus on research and development fosters continuous innovation.

What to watch

•High competition in the medical technology sector may impact market share.
•Regulatory challenges can affect product launch timelines.
•Complex organizational structure may slow decision-making processes.

Why Stryker

•Stryker's commitment to innovation in medical technology sets it apart.
•Diverse product range across orthopedics, surgical, and neurotechnology.
•Strong emphasis on employee development through varied roles and internships.

Aplyr’s read is generated by AI from public sources. Was it useful?

About Stryker

Stryker

stryker.com

View company

Stryker is a global leader in medical technology, offering innovative products and services in orthopedics, medical and surgical, and neurotechnology and spine.