Job description

Are you passionate about breaking things to make them better? We're on the lookout for a skilled Embedded Penetration Tester to join our dynamic team!

If you have hands-on experience in IoT, Medical Devices, or Automotive systems, we want to hear from you. You'll be jumping into an ongoing project, working alongside top-notch professionals to deliver cutting-edge, secure solutions for our clients.

Requirements (IoT, Medical):

• In-depth knowledge of Automation, IoT and medical industry communication protocols.
• Understanding of relevant automotive standards and specifications such us IEC62443.
• Familiarity with the security mechanisms and vulnerabilities associated with various embedded systems.
• Knowledge of secure boot processes and firmware update mechanisms.
• Expertise in analysing and securing different type of networks.
• Ability to assess the security of communication buses and identify potential attack vectors.
• Ability to assess vulnerabilities in various types of interfaces, systems, and communication interfaces.
• Proficiency in reverse engineering and analysing firmware running on various device types.
• Capability to identify and exploit vulnerabilities within device firmware.
• Familiarity with diagnostic and testing tools used in developing embedded solutions.
• Ability to use tools for debugging, sniffing, and analyzing network traffic.
• Understanding of security challenges associated with device-to-cloud communication.
• Ability to assess the security of cloud-connected services and backend systems.
• Proficiency in using penetration testing tools tailored for embedded systems.
• Experience with tools specific to analyzing and exploiting security vulnerabilities.
• Capability to perform risk assessments and threat modeling specific to Automation, IoT or medical environments.
• Understanding of potential threats and their impact on device security.
• Awareness of legal and compliance considerations in penetration testing.
• Clear and concise communication skills to convey findings to both technical and non-technical stakeholders.
• Ability to generate detailed penetration testing reports with actionable recommendations.

Requirements (Automotive)

• In-depth knowledge of automotive communication protocols such as CAN (Controller Area Network), LIN (Local Interconnect Network), and FlexRay.
• Familiarity with AUTOSAR
• Understanding of relevant automotive standards and specifications such us ISO21434.
• Familiarity with the security mechanisms and vulnerabilities associated with various ECUs in vehicles (vehicle control units, infotainment systems, advanced driver-assistance systems).
• Knowledge of secure boot processes and firmware update mechanisms.
• Expertise in analysing and securing in-vehicle networks.
• Ability to assess the security of in-car communication buses and identify potential attack vectors.
• Ability to assess vulnerabilities in multimedia interfaces, entertainment systems, and communication interfaces.
• Proficiency in reverse engineering and analysing firmware running on automotive ECUs.
• Capability to identify and exploit vulnerabilities within ECU firmware.
• Familiarity with diagnostic and testing tools used in the automotive industry.
• Ability to use tools for debugging, sniffing, and analysing in-vehicle network traffic.
• Understanding of security challenges associated with vehicle-to-cloud communication.
• Ability to assess the security of cloud-connected services and backend systems.
• Proficiency in using penetration testing tools tailored for automotive embedded systems.
• Experience with tools specific to analysing and exploiting automotive security vulnerabilities.
• Capability to perform risk assessments and threat modelling specific to automotive environments.
• Understanding of potential threats and their impact on vehicle security.
• Awareness of legal and compliance considerations in automotive penetration testing.
• Incident Response for Vehicles: Clear and concise communication skills to convey findings to both technical and non-technical stakeholders.
• Ability to generate detailed penetration testing reports with actionable recommendations.

Responsibilities

• Maintaining awareness of legal and compliance considerations in penetration testing activities.
• Ensuring adherence to relevant regulations and ethical guidelines
• Performing risk assessments and threat modeling specific to automation, IoT, automotive or medical environments.
• Proficiently analyzing and securing firmware running on various device types.
• Identifying and exploiting vulnerabilities within device firmware to enhance overall security.