Vulnerability Management Product Cyber Specialist

Location: Pune, Maharashtra, India

Job Summary

Forensic Analysis & Offensive Security for Product Cybersecurity This role supports shift left forensic and offensive security evaluations for embedded and connected products across on highway and off highway platforms. The role is focused on hands on technical execution, including early vulnerability discovery, exploit feasibility analysis, architecture reviews, reverse engineering, and pre certification penetration testing, to provide actionable technical findings ahead of external certification testing. This role does not own security capability strategy, tooling ownership, or organizational maturity and does not replace external penetration testing or certification mandated evaluations.

 

KEY RESPONSIBILITIES 

• Vulnerability Scanning & Analysis 
•  Perform firmware, binary, and configuration vulnerability scanning, side channel attacks on embedded products. 
• Identify known weaknesses such as insecure configurations, outdated components, and cryptographic issues. 
•  Assess vulnerabilities based on practical exploitability and product context, in addition to standard severity scoring. 
• Document findings clearly with technical evidence and reproducible observations. B. Product & ECU Penetration Testing 
•  Execute pre certification penetration testing activities early in the product lifecycle. 
• Perform attacker perspective testing to identify realistic product weaknesses prior to engagement with external labs. 
• Conduct hands on testing using defined test setups for: o ECU level penetration testing o System level penetration testing o CAN / UDS / J1939 / Ethernet / MODBUS and related protocol fuzzing 
• Provide test results, observations, and technical inputs that complement external penetration testing efforts. 
•  Architecture & Threat Assessments 
• Perform shift left architecture reviews focused on identifying implementation weaknesses related to, Trust boundaries o Cryptographic usage and key handling o Secure boot and firmware integrity o OTA mechanisms o Secure communication paths 
• Correlate architectural weaknesses with observed attack paths and test results from internal assessments. 
• Provide specific, actionable technical recommendations to improve product robustness prior to external testing. 
• Reverse Engineering & Firmware Analysis 
•  Extract firmware using available interfaces such as JTAG/SWD, memory access techniques, and OTA packages. 
•  Perform static and dynamic binary analysis using reverse engineering tools. 
•  Support protocol analysis, secure boot evaluation, and proof of concept exploit development where required to validate findings. 
• Capture technical artefacts, evidence, and analysis results in a structured and traceable manner. 
•  Forensic Analysis & Post Incident Support 
•  Support collection and analysis of logs, traces, firmware artefacts, and memory dumps following security events. 
•  Assist in reconstructing attack sequences using forensic evidence and technical analysis. 
• Correlate forensic findings with observed product behavior and known attack techniques. • Provide technical inputs to strengthen product design and implementation before subsequent test cycles.

About Us

Cummins is an equal opportunity employer. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, sex, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity, or other status protected by law.This product focused position performs established technical tasks at the sub-system and/or component level for current and future products within a given business unit or corporate area. This involves work across many steps in the product life cycle. Because of the product centered nature of this position, they are very often a central point of coordination and decision making between product line engineers, customer teams, systems engineers, purchasing, suppliers and manufacturing.