Senior Engineer - Embedded Product Security

About the role

The Senior Engineer will lead embedded product security efforts, performing vulnerability assessments and penetration testing on hardware and firmware. This hybrid position combines hands‑on analysis with strategic threat modelling for medical devices.

Key responsibilities

• Conduct initial reconnaissance to understand product internals and communication mechanisms.
• Develop threat models, identify actors and entity boundaries.
• Analyze protocol specifications, gather sample implementations, test with simulators, and script interactions.
• Extract and analyze firmware, perform manual binary reversing, and assess firmware update processes.
• Identify and evaluate hardware debug ports, extract memory, and test malicious data injection.
• Perform vulnerability assessment and penetration testing on embedded devices, including USB, Ethernet, UART, Wi‑Fi, MQTT, JTAG, and radio interfaces.

Required profile

• Bachelor’s degree in Software/Electronics Engineering or equivalent.
• 2‑7 years of hands‑on vulnerability and penetration testing experience.
• Experience automating tasks with Jenkins or scripting languages (PowerShell, Ruby, Python).
• Professional security certification (e.g., OSCP, OSCE, CPENT, LPT, ECSA Practical, OSWE).
• Excellent communication, independent and self‑motivated.
• Preferred: experience with medical devices and cloud environments (Azure, AWS).

Required skills

• Kali, Nessus, Burp Suite, Qualys
• Jenkins, PowerShell, Ruby, Python
• UART, Wi‑Fi, MQTT, JTAG, USB, Ethernet
• Firmware extraction, binary reverse engineering, hardware debug analysis