Cyber Security Engineer

Job Role: Cyber Security Engineer ( Drone/ UAV)

Location: Indian Institute of Technology Bombay, Mumbai

Job Category: Project Research Staff

About the Project:

A government-funded initiative at IIT Bombay focusing on the development and demonstration of drone and allied technologies. This project aims to address various applications through the utilization of advanced technologies and critical infrastructure. We foster strong industry connections and collaborations to solve pertinent challenges and drive technological advancements.Comprehensive drone training and awareness programs will be provided to ensure proficiency and understanding among people.

Job Summary:

We are seeking a skilled and competent Drone Hardware Security Specialist to ensure the robust security of our unmanned aerial systems (UAS) and associated infrastructure. In this role, you will be responsible for identifying vulnerabilities in drone hardware, software, and communication protocols by performing real-world cyberattacks and proposing effective mitigation strategies.

Roles and Responsibilities:

• Perform comprehensive vulnerability assessments and penetration testing on drone hardware, firmware, software, and ground control systems.
• Identify Vulnerabilities by usingethical hacking techniques to discover weaknesses, including those related to physical tampering, unauthorized access, communication interception (RF analysis), and data exfiltration.
• Assess the security of wireless communication links (e.g., proprietary RF, Wi-Fi, Cellular) between UAV to UAV, UAV to GCS and UAV to RC to prevent jamming, interception, or unauthorized control.
• Evaluate the physical components of drones for vulnerabilities, focusing on tamper-proofing, secure boot mechanisms, and data storage security on onboard systems.
• Collaborate with the drone team to design and implement robust security architectures and recommend hardware enhancements to address identified flaws.
• Ensure Compliance by verifying that drone operations and systems adhere to relevant industry standards, government regulations, and safety protocols. Also, stay current with the latest hacking methodologies related to UAVs.
• Any other work assigned as required.

Qualifications and Key Skills Required:

• PhD with relevant experience, OR
• M.Tech / M.E. or equivalent degree with relevant experience, OR
• B.Tech / B.E. or equivalent degree with relevant experience.
• Experience in cybersecurity, penetration testing, or a similar role, with specific experience in hardware security or IoT security with relevant certifications.
• Strong understanding of cybersecurity principles, networking protocols, operating systems (Linux fundamentals), and web application security.
• Hands-on experience using development boards and testing instruments.
• Strong programming skills in C, C++, Python and Bash for scripting exploits and automation.
• Familiarity with UAV communication protocols (e.g., MAVLink, MSP), autopilot frameworks (PX4, ArduPilot), sensors, cameras and electrical systems.
• Knowledge of drones and aerial robotics.
• Good communication skills and ability to collaborate with a multidisciplinary team.