Full Description

Summary

• We are seeking an experienced Embedded and Application Penetration Tester to join the Product Cybersecurity team. The role focuses on conducting comprehensive security assessments across embedded/IoT devices, web applications, thick-client applications, and mobile platforms. The engineer will perform advanced penetration testing and Red Team activities to identify, exploit, and report vulnerabilities. The initial engagement duration is six months, with potential for extension based on performance. Contingent workers will be considered for this role.

Responsibilities

• Conduct comprehensive security assessments on embedded/IoT devices.
• Perform advanced penetration testing and Red Team activities.
• Analyze and reverse engineer firmware.
• Test hardware interfaces such as JTAG and UART.
• Validate compliance with IEC 62443-4-2 standards.
• Support PSIRT and vulnerability disclosure processes.

Requirements

• 3-5 years of experience in embedded testing, with a focus on penetration testing for embedded systems.
• Familiarity with protocols and embedded systems.
• Experience with physical port testing (USB, serial, CAN, wireless).
• Proficiency in penetration testing tools such as Metasploit, Nessus, Qualys, Nmap, and Burp Suite.

Required Skills

• Strong problem-solving and critical thinking skills.
• Excellent communication and report writing abilities.
• Ability to collaborate effectively as part of a global cross-functional team, working independently with minimal supervision.

Preferred Skills

• Certification in a relevant area such as OSCP, OSWP, GPEN, CPTC, or CPTE is highly desired.
• Excellent communication and presentation skills.

#AditiConsulting #26-01189