Embedded Penetration Tester

Markteinblicke

Stack

Details

Kostenlos, nach der Anmeldung.

Bewerben

Laden Sie Ihren Lebenslauf hoch — Arbeitgeber und Recruiter aus verschiedenen Ländern, die Ihr Profil suchen, können Sie direkt kontaktieren.

Beschreibung

Tech stack: Secure boot, firmware security, OTA updates. Cryptography (AES, RSA, ECC) & hardware security (TPM, HSM, TrustZone). Embedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP. Penetration testing on embedded targets: JTAG, UART, SPI, I²C. Cloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S). Secure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security. Requirements Proven experience in embedded systems, IoT security, or product cybersecurity. Hands-on knowledge of secure boot, firmware protection, code signing, and secure update mechanisms. Deep understanding of cryptography and key management in embedded environments. Experience securing communication protocols and network interfaces in connected devices. Knowledge of IoT authentication, authorization, and cloud security architectures. Experience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees. Ability to perform security risk assessments aligned with: ISO 21434, IEC 62443, ISO 27005. Understanding of common embedded attack vectors: side-channel attacks, fault injection, firmware tampering, replay attacks, MITM attacks. Experience conducting penetration testing on embedded targets using interfaces such as JTAG, UART, SPI, and I²C. Experience with fuzz testing communication stacks (CAN, TCP/IP, MQTT). Understanding of secure SDLC principles, DevSecOps, and cybersecurity lifecycle management. Knowledge of vulnerability management, system h

Vollständige Beschreibung, Unternehmen und Bewerbungslink — nach der Anmeldung. Anmelden

Kontaktdaten des Arbeitgebers (E-Mail/Telefon/Telegram) sind in der öffentlichen Vorschau ausgeblendet. Senden Sie Ihren Lebenslauf — dann können Arbeitgeber Sie direkt kontaktieren.