Role Summary

Key Responsibilities

• Perform DLMS/COSEM protocol testing and firmware validation for meters/NICs from different OEMs
• Conduct hardware security testing — PCB analysis, JTAG/SWD debugging, firmware extraction
• Perform firmware reverse engineering and static/dynamic analysis to identify vulnerabilities
• Test RF/wireless and network communication for security gaps (MITM, replay, packet injection, protocol fuzzing)
• Validate FOTA/OTA update security, secure boot, encryption, and authentication mechanisms
• Assess AMI communication channels (RF, cellular, PLC, Ethernet, optical) for interception, tampering, and data-integrity risks
• Test HES–meter and HES–MDMS communication/interfaces for security gaps and unauthorized access points
• Conduct vulnerability assessment & penetration testing (VAPT) on meter, HES, and MDMS interfaces
• Recommend and implement security controls/fixes to close identified gaps across meter, communication, and HES/MDMS layers
• Analyse logs, traces, and firmware behaviour to identify defects and perform root cause analysis (RCA)
• Document test cases, VAPT findings, and OEM-wise security assessment reports
• Support compliance validation against IS 13779, IS 16444, CBIP-325, IEC 62056, IS 15959

Required Skills

• Hands-on experience with DLMS/COSEM testing (Gurux, Kalkitech, BCS, CMRI etc.)
• Embedded firmware validation, firmware flashing (Renesas or similar), FOTA/OTA testing
• Exposure to firmware reverse engineering tools (Ghidra, Binwalk etc.)
• Familiarity with penetration testing/vulnerability tools (Kali Linux, Burp Suite, Wireshark, Nmap, Nessus etc.)
• Understanding of hardware security (JTAG/SWD, chip-off etc.) and RF/SDR-based communication testing
• Knowledge of AMI communication technologies (RF, cellular, PLC, Ethernet, optical etc.) and associated security risks
• Understanding of HES/MDMS architecture, APIs, and interface security
• Knowledge of Scripting, encryption, authentication, and secure boot concepts