Full Description

Company Description AXISCADES is a multinational technology enterprise rooted in India and operating across India, Europe, and the USA. The company is a global leader in Aerospace, Defense, and ESAI (Electronics, Semiconductor, and Artificial Intelligence), delivering advanced systems, products, and solutions tailored to these sectors. With a team of over 3,000 professionals and state-of-the-art facilities, AXISCADES supports design, development, manufacturing, assembly, testing, and R&D for several of the world’s top companies in its core domains. Publicly listed on the Indian Stock Exchange (NSE & BSE), the organization continues to invest in infrastructure and talent to strengthen its global presence. Applicants joining AXISCADES will be part of a team shaping the future of technology and innovation in high-impact industries. Role Description This is a full-time hybrid role for an Automotive Penetration Test Engineer based in the Manchester Area, United Kingdom, with flexibility for partial work from home. The engineer will plan, execute, and document penetration tests on automotive systems, including in-vehicle networks, ECUs, infotainment, telematics, and connected vehicle platforms. Day-to-day responsibilities include threat modeling, vulnerability assessment, exploit development, and security validation in line with industry standards and regulatory requirements. The role involves collaborating with cross-functional teams such as embedded software, hardware, cybersecurity, and quality assurance to recommend mitigations and support secure design improvements. The engineer will also contribute to security test frameworks, tooling, and best practices, and provide clear technical reports and presentations to both technical and non-technical stakeholders. Qualifications Strong automotive cybersecurity skills, including familiarity with in-vehicle networks (CAN, LIN, FlexRay), automotive Ethernet, and connected vehicle architectures, and experience assessing ECUs, infotainment, and telematics systems. Hands-on penetration testing capabilities, including threat modeling, vulnerability assessment, exploit development, and use of common offensive security tools (e.g., Burp Suite, Metasploit, Wireshark, fuzzers, custom scripts). Knowledge of relevant standards and frameworks such as ISO/SAE 21434, UNECE R155/R156, and general security principles (secure coding, encryption, authentication, access control). Experience with embedded systems and software, including C/C++, Python or similar scripting languages, Linux-based environments, and debugging or reverse engineering of firmware. Proficiency in network and application security, including TCP/IP, web services, APIs, wireless communication (Bluetooth, Wi‑Fi, cellular), and secure communication protocols. Strong analytical, documentation, and communication skills to produce clear test plans, reports, and risk assessments and to explain technical findings to diverse stakeholder groups