Embedded Penetration Tester

Market insights

Stack

Apply

Upload your CV — we will connect you with the employer directly through our pool.

Description

Tech stack: Secure boot, firmware security, OTA updates. Cryptography (AES, RSA, ECC) & hardware security (TPM, HSM, TrustZone). Embedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP. Penetration testing on embedded targets: JTAG, UART, SPI, I²C. Cloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S). Secure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security. Requirements Proven experience in embedded systems, IoT security, or product cybersecurity. Hands-on knowledge of secure boot, firmware protection, code signing, and secure update mechanisms. Deep understanding of cryptography and key management in embedded environments. Experience securing communication protocols and network interfaces in connected devices. Knowledge of IoT authentication, authorization, and cloud security architectures. Experience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees. Ability to perform security risk assessments aligned with: ISO 21434, IEC 62443, ISO 27005. Understanding of common embedded attack vectors: side-channel attacks, fault injection, firmware tampering, replay attacks, MITM attacks. Experience conducting penetration testing on embedded targets using interfaces such as JTAG, UART, SPI, and I²C. Experience with fuzz testing communication stacks (CAN, TCP/IP, MQTT). Understanding of secure SDLC principles, DevSecOps, and cybersecurity lifecycle management. Knowledge of vulnerability management, system h

Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.