Description

Lead advanced security testing engagements for the Connected Car ecosystem, owning the full security verification lifecycle from design to release.

Responsibilities

• Analyze security requirements to generate test specifications during the design phase.
• Execute security test specifications during verification to ensure proper implementation.
• Perform penetration testing and reverse engineering on embedded hardware and firmware.
• Conduct security design reviews and research new attack vectors and exploitation techniques.
• Communicate technical findings, remediation guidance, and risks to technical and non-technical stakeholders.

Required Skills

• 5+ years of experience in embedded security testing or related fields.
• Proficiency in C, C++, and Python for security tool development.
• Hands-on experience securing Linux, MacOS, Windows, and Android operating systems.
• Working knowledge of secure boot, secure debug, secure storage, and secure communications.
• Experience with reverse engineering and binary analysis tools such as IDA Pro or Ghidra.
• Experience with vulnerability analysis using CVSS scoring and CWE types.
• Competence with on-board communication interfaces including JTAG, SPI, UART, and SWD.
• Knowledge of core security concepts and the secure development lifecycle.

Preferred Skills

• Experience with automotive standards like ISO-SAE 21434 or SAE J3101.
• Knowledge of automotive protocols such as CAN, LIN, MOST, Automotive Ethernet, or TCP/IP.
• Familiarity with ARM TrustZone architecture and SoC security technologies like eFuses or HAB.

Key Skills

Education

Any Graduate