Penetration Tester – Hardware

This is a fully remote position, open to applicants in Florida, +1 more state.

📋 Description

• Plan and carry out comprehensive hardware penetration tests on embedded and IoT devices.

• Identify, access, and exploit JTAG, SWD, UART, and other similar on-board debugging interfaces.

• Extract and analyze firmware using debugging ports, SPI/I2C/NAND flash reads, or chip-off methods.

• Intercept and scrutinize SPI, I2C, UART, CAN, and USB embedded-bus data.

• Conduct side-channel analysis and fault injection as applicable.

• Reverse engineer firmware and embedded binaries utilizing tools such as Ghidra, IDA, and Binwalk.

• Evaluate physical attack surfaces, tamper resistance, and key/secret storage mechanisms.

• Differentiate between theoretical risks and those relevant to operational contexts.

• Compose technical reports and present findings to both technical and non-technical stakeholders.

• Provide clients with practical, prioritized remediation advice.

• Develop and sustain laboratory tools, test rigs, and internal methodologies.

• Contribute to research, responsible disclosure, and internal knowledge-sharing initiatives.

• Remain updated on hardware attack methodologies, embedded architectures, and defensive measures.

⛳️ Requirements

• Must reside in Texas or Florida.

• A graduate of an Information Security, Computer Science, or Computer/Electrical Engineering degree program, or possess equivalent hands-on experience.

• Strong foundation in electronics; able to read schematics and datasheets and analyze a circuit board effectively.

• Practical soldering skills, including surface-mount (SMD) rework and basic chip removal.

• Proven experience in accessing JTAG, SWD, and UART debugging interfaces and extracting firmware from actual devices.

• Proficient with logic analyzers, oscilloscopes, and multimeters.

• Skills in firmware reverse engineering and scripting, particularly in Python, along with sufficient C knowledge to interpret embedded code.

• Familiarity with ARM/Cortex-M, MIPS, AVR, and RISC-V architectures, as well as RTOS/bare-metal concepts.

• Excellent written and verbal communication skills.

🏝️ Benefits

• Immediate and ongoing offensive security training, mentorship, and opportunities for professional development.

• Competitive salary and opportunities for growth.

• Reimbursement for paid education and professional development.

• Flexible work environment.

• One paid volunteer day each year.

• Paid day off for your birthday.

• Paid U.S. public holidays.

• Fully remote position within Texas or Florida.