Remote job
Senior Engineer - Penetration Testing
Job details
About this role
Role overview
Conduct hands-on security assessments of connected devices and embedded systems, testing both hardware and software for exploitable weaknesses. The work spans areas such as industrial, automotive, and IoT products, and combines technical investigation with clear customer guidance. Findings should help product teams understand practical risk and decide how to address it.
Responsibilities
- Assess device hardware and firmware, including interfaces, debug access, boot processes, and update mechanisms. - Investigate wireless communications and relevant automotive or industrial protocols. - Review embedded C and C++ code and test related networks, applications, and APIs where they contribute to a device’s attack surface. - Validate whether suspected weaknesses are exploitable and explain their impact. - Write structured technical reports and present findings to varied audiences. - Use scripting and security analysis tools to support testing and reporting.
Requirements
- Significant hands-on experience testing embedded devices, hardware, or firmware. - Practical knowledge of hardware interfaces such as UART, JTAG, or SWD, and of firmware analysis techniques. - Experience with wireless protocols and working familiarity with automotive or industrial protocols. - Ability to review C and C++ code for security weaknesses and apply network or application testing methods. - Strong written and verbal communication, including customer-facing reporting. - Experience with Python or Bash scripting; familiarity with SBOMs, CVSS, and VEX concepts.
Nice to have
- Automotive or industrial control security experience, vulnerability research, or responsible disclosure. - Familiarity with security standards or regulations relevant to connected products. - Experience with static or dynamic analysis tools, AI-assisted security workflows, or relevant security certifications.
Benefits and work setup
- Remote role for candidates authorized to work in the United States without sponsorship; occasional travel may be needed. - Work equipment for a hardware testing bench is provided.