Penetration Tester – Hardware

This is a fully remote position, open to applicants in Florida, +1 more state.

📋 Description

• Design and implement comprehensive hardware penetration testing for embedded and IoT devices.

• Identify, access, and exploit on-board debug interfaces such as JTAG, SWD, and UART.

• Extract and analyze firmware through debug ports, in-circuit flash reads, or chip-off methods.

• Intercept and evaluate SPI, I2C, UART, CAN, and USB embedded communication buses.

• Conduct side-channel analysis and fault injection as required.

• Reverse engineer firmware and embedded binaries utilizing tools like Ghidra, IDA, and Binwalk.

• Evaluate physical attack surfaces, tamper resistance, and the storage of keys/secrets.

• Differentiate between theoretical risks and those relevant to operational contexts.

• Compose technical reports and communicate findings to both technical and non-technical stakeholders.

• Provide clients with practical and prioritized remediation advice.

• Develop and sustain lab tooling, test setups, and internal methodologies.

• Engage in research, responsible disclosure, and the sharing of internal knowledge.

• Remain informed about hardware attack methodologies, embedded architectures, and defensive measures.

⛳️ Requirements

• Must reside in Texas or Florida.

• Graduate from an Information Security, Computer Science, or Computer/Electrical Engineering program, or possess equivalent hands-on experience.

• Strong foundational knowledge in electronics; capable of interpreting schematics and datasheets and reasoning about circuit boards.

• Proficient in hands-on soldering, including surface-mount (SMD) rework and basic chip removal.

• Proven experience accessing JTAG, SWD, and UART debug interfaces, as well as extracting firmware from actual devices.

• Comfortable using logic analyzers, oscilloscopes, and multimeters.

• Skilled in firmware reverse engineering.

• Proficiency in scripting with Python and sufficient knowledge of C to analyze embedded code.

• Familiarity with ARM/Cortex-M, MIPS, AVR, and RISC-V architectures, along with RTOS and bare-metal concepts.

• Excellent written and verbal communication skills.

• Preferred: experience in side-channel/fault injection, RF and wireless technologies, secure boot processes, TEEs, secure elements, HSMs, PCB design, published CVEs, conference presentations, CTF achievements, open-source tools, and relevant certifications.

🏝️ Benefits

• Immediate and ongoing training in offensive security, mentorship, and opportunities for professional growth.

• Competitive salary with opportunities for advancement.

• Reimbursement for paid education and professional development.

• Flexible work arrangements.

• One paid volunteer day per year.

• Paid day off for your birthday.

• Paid U.S. public holidays.

• Fully remote work within Texas or Florida.