Penetration Tester

Responsibilities

• Conduct penetration testing, vulnerability assessments, and security audits on medical devices, embedded systems, and healthcare applications
• Simulate real-world cyberattacks to identify security risks across firmware, software, mobile applications, and cloud platforms
• Perform threat modeling and risk assessments tailored to medical device environments
• Collaborate with product engineering, QA, and compliance teams to remediate vulnerabilities and recommend secure design practices
• Ensure testing meets regulatory guidelines including FDA premarket/postmarket cybersecurity guidance, HIPAA, and IEC 81001-5-1
• Develop detailed penetration test reports with exploits, risk ratings, and remediation recommendations
• Stay updated on evolving healthcare/IoMT cybersecurity threats and tools

Requirements

• 5+ years of penetration testing experience, preferably in medical devices, healthcare, or embedded systems
• Proficiency in tools such as Burp Suite, Metasploit, Nmap, Kali Linux, Wireshark, Nessus, IDA Pro, Ghidra
• Strong understanding of embedded system security, wireless protocols (Bluetooth, BLE, Zigbee, Wi-Fi), and IoT device testing
• Familiarity with FDA cybersecurity guidance, HIPAA, IEC 62304, ISO 14971
• Expertise in application security testing (web, mobile, API) and secure coding practices
• Solid knowledge of network security, cryptography, authentication protocols, and cloud security

Preferred Qualifications

• Certifications such as OSCP, OSWE, CEH, GPEN, GWAPT, or CISSP

About the Company

Naico ITS is a premier technology company specialized in providing custom engineered software solutions to business enterprises around the world. Headquartered in Infopark, Kochi, Naico was founded by highly accomplished technology professionals to build world-class solutions.