C3i Hub
Website:
c3ihub.org
Job details:
Role Summary
Test and validate smart meter/NIC hardware, firmware, and end-to-end AMI communication (Meter–NIC–HES–MDMS) across multiple OEMs for security vulnerabilities, protocol compliance, and cyber-attack resistance.
Key Responsibilities
- Perform DLMS/COSEM protocol testing and firmware validation for meters/NICs from different OEMs
- Conduct hardware security testing — PCB analysis, JTAG/SWD debugging, firmware extraction
- Perform firmware reverse engineering and static/dynamic analysis to identify vulnerabilities
- Test RF/wireless and network communication for security gaps (MITM, replay, packet injection, protocol fuzzing)
- Validate FOTA/OTA update security, secure boot, encryption, and authentication mechanisms
- Assess AMI communication channels (RF, cellular, PLC, Ethernet, optical) for interception, tampering, and data-integrity risks
- Test HES–meter and HES–MDMS communication/interfaces for security gaps and unauthorized access points
- Conduct vulnerability assessment & penetration testing (VAPT) on meter, HES, and MDMS interfaces
- Recommend and implement security controls/fixes to close identified gaps across meter, communication, and HES/MDMS layers
- Analyse logs, traces, and firmware behaviour to identify defects and perform root cause analysis (RCA)
- Document test cases, VAPT findings, and OEM-wise security assessment reports
- Support compliance validation against IS 13779, IS 16444, CBIP-325, IEC 62056, IS 15959
Required Skills
- Hands-on experience with DLMS/COSEM testing (Gurux, Kalkitech, BCS, CMRI etc.)
- Embedded firmware validation, firmware flashing (Renesas or similar), FOTA/OTA testing
- Exposure to firmware reverse engineering tools (Ghidra, Binwalk etc.)
- Familiarity with penetration testing/vulnerability tools (Kali Linux, Burp Suite, Wireshark, Nmap, Nessus etc.)
- Understanding of hardware security (JTAG/SWD, chip-off etc.) and RF/SDR-based communication testing
- Knowledge of AMI communication technologies (RF, cellular, PLC, Ethernet, optical etc.) and associated security risks
- Understanding of HES/MDMS architecture, APIs, and interface security
- Knowledge of Scripting, encryption, authentication, and secure boot concepts
Click on Apply to know more.
