Job Description

Job Title

:- Penetration Tester (IoT)

We are looking for a Penetration Tester (IoT) to join our security team, who will be responsible for assessing and testing the security of IoT devices, firmware, embedded systems, and connected applications.

:

Qualysec Technologies is seeking a skilled and motivated Penetration Tester (IoT) to join our security team in Bhubaneswar. The role involves performing security testing on IoT devices, embedded firmware, hardware interfaces, and IoT communication protocols, identifying vulnerabilities, and providing actionable remediation guidance.

About Us:

Qualysec is a leading cybersecurity firm specializing in comprehensive penetration testing and risk assessment services. Our tailored solutions help businesses proactively defend against evolving cyber threats.

With over 5+ years of experience, we take pride in having served more than 200+ clients across 30+countries--a testament to our commitment to quality and resilience. Our dynamic work environment and employee-focused culture drive our continuous growth and success.

Qualification

:- Bachelor's Degree in a related Cybersecurity/IT/Computer Science field.

Experience:-

1 to 2 years of hands-on experience in IoT / embedded systems security or penetration testing.

Location:-

Bhubaneswar

Job Type:-

Full Time

Responsibilities

Perform end-to-end penetration testing on all types of IoT and embedded devices, including consumer, industrial, medical, automotive, and smart infrastructure devices

Test device hardware, firmware, bootloaders, and embedded operating systems

Assess security of wireless and wired communication protocols (Wi-Fi, BLE, Zigbee, Z-Wave, LoRaWAN, NFC, CAN, Modbus, etc.)

Conduct mobile app, API, and cloud backend testing connected to IoT devices

Perform secure boot, OTA update, and cryptographic implementation testing

Identify hardware, firmware, and software vulnerabilities and provide remediation guidance

Produce clear technical and executive-level security reports

Stay up to date with emerging IoT threats, vulnerabilities, and attack techniques

Skills Required

Ability to assess any IoT or embedded platform, including RTOS, Linux-based, and bare-metal systems

Strong experience with firmware extraction, analysis, and reverse engineering

Hands-on knowledge of hardware interfaces (UART, JTAG, SWD, SPI, I2C)

Experience with radio and protocol analysis

Solid understanding of embedded architectures (ARM, MIPS, RISC-V)

Familiarity with common Pentesting tools and custom exploit development

Strong documentation and communication skills

Tools & Technologies:

Hardware & Debugging Tools:

JTAG, SWD, UART, SPI, I2C Bus Pirate, Shikra, JTAGulator

Firmware & Reverse Engineering:

Ghidra, IDA Pro, Radare2 OpenOCD

Network & Protocol Testing:

Wireshark, tcpdump RF tools

Wireless & IoT Protocols:

MQTT, CoAP, HTTP/HTTPS BLE, Zigbee, Z-Wave, LoRaWAN, NFC CAN, Modbus, BACnet

Benefits:

Competitive salary, great perks, and a work culture that's as fun as it is rewarding. On-time Salary Paid time off and holidays. Leave encashment Lunch Provided. Provident Fund Plenty of room to experiment, innovate, and grow.
Job Type: Full-time

Benefits:

Food provided Health insurance Paid sick time Paid time off Provident Fund
Work Location: In person