Embedded Penetration Tester

Analisi del mercato

Stack

Dettagli

Gratis, dopo l'accesso.

Candidati

Carica il tuo CV: datori di lavoro e recruiter di diversi paesi che cercano il tuo profilo potranno contattarti direttamente.

Descrizione

Tech stack: Secure boot, firmware security, OTA updates. Cryptography (AES, RSA, ECC) & hardware security (TPM, HSM, TrustZone). Embedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP. Penetration testing on embedded targets: JTAG, UART, SPI, I²C. Cloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S). Secure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security. Requirements Proven experience in embedded systems, IoT security, or product cybersecurity. Hands-on knowledge of secure boot, firmware protection, code signing, and secure update mechanisms. Deep understanding of cryptography and key management in embedded environments. Experience securing communication protocols and network interfaces in connected devices. Knowledge of IoT authentication, authorization, and cloud security architectures. Experience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees. Ability to perform security risk assessments aligned with: ISO 21434, IEC 62443, ISO 27005. Understanding of common embedded attack vectors: side-channel attacks, fault injection, firmware tampering, replay attacks, MITM attacks. Experience conducting penetration testing on embedded targets using interfaces such as JTAG, UART, SPI, and I²C. Experience with fuzz testing communication stacks (CAN, TCP/IP, MQTT). Understanding of secure SDLC principles, DevSecOps, and cybersecurity lifecycle management. Knowledge of vulnerability management, system h

Descrizione completa, azienda e link per candidarti: dopo l'accesso. Accedi

I contatti del datore di lavoro (email/telefono/telegram) sono nascosti nell'anteprima pubblica. Invia il tuo CV così i datori di lavoro possono contattarti direttamente.