Embedded Iot Security

Embedded Iot Security Cybersecurity Jobs

2 jobs found

1mo ago

Penetration Tester - Hardware

Packetlabs Miami, FL 🇺🇸 Remote

Miami, FL

1mo ago Closed

$80k - $120k/yr Full time Cybersecurity Tools Embedded Firmware Embedded Iot Security

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

This remote Penetration Tester - Hardware role at Packetlabs focuses on leading security assessments of embedded and IoT devices, combining hands-on physical testing with rigorous analysis to produce credible, actionable results for clients.

Location

Florida (remote)

Salary

USD 80,000 - 120,000 per year

Role Summary

In this position, you will plan and execute end-to-end hardware penetration testing across embedded and IoT environments. Responsibilities include direct interaction with embedded hardware, firmware analysis, and examination of physical attack surfaces. You will collaborate with clients to deliver findings that improve overall security posture.

Key Responsibilities

Plan and execute end-to-end hardware penetration tests on embedded and IoT devices, aligned to a defined scope and rules of engagement
Identify, access, and exploit on-board debug interfaces such as JTAG, SWD, UART, and similar interfaces to gain code execution or memory access
Extract firmware via debug ports, in-circuit flash reads (SPI / I2C / NAND), or chip-off when required, then analyze for vulnerabilities
Intercept and analyze data on embedded buses including SPI, I2C, UART, CAN, and USB using logic analyzers and protocol decoders
Where in scope, perform side-channel analysis and fault injection such as power analysis and voltage or clock glitching to bypass secure boot, readout protection, or authentication
Reverse engineer firmware and embedded binaries using tools such as Ghidra, IDA, and Binwalk to identify logic flaws, hardcoded secrets, and exploitable conditions
Assess physical attack surface, tamper resistance, and key or secret storage
Differentiate theoretical concerns from operationally relevant risk to keep reports actionable
Produce high-quality technical reports and present results to both technical and non-technical client stakeholders
Advise clients on practical, prioritized remediation they can act on
Build and maintain lab tooling, test rigs, and internal methodology
Contribute to research, responsible disclosure, and internal knowledge-sharing
Stay current on hardware attack techniques, embedded architectures, and defensive controls
Help raise the standard of hardware security work across the firm

Required Education and Experience

Graduate of an Information Security, Computer Science, or Computer/Electrical Engineering degree program (or equivalent hands-on experience)
Strong electronics fundamentals, including the ability to read schematics and datasheets and reason about a board from them
Hands-on soldering capability, including SMD rework and basic chip removal
Demonstrated experience accessing debug interfaces (JTAG, SWD, UART) and extracting firmware from real devices
Comfort using core bench instruments including a logic analyzer, oscilloscope, and multimeter
Firmware reverse-engineering skills with scripting proficiency in Python, plus enough C to read embedded code
Familiarity with embedded architectures including ARM/Cortex-M, MIPS, AVR, and RISC-V, as well as RTOS and bare-metal concepts
Clear written and verbal communication

Technologies

JTAG, SWD, UART, SPI, I2C, NAND, CAN, USB
Logic analyzers, protocol decoders
Ghidra, IDA, Binwalk
Python, C
ARM/Cortex-M, MIPS, AVR, RISC-V
RTOS, bare-metal
KiCad, Altium
ChipWhisperer, SDR, BLE, Wi-Fi

Benefits

Immediate and ongoing offensive security training, mentorship, and professional development
Competitive compensation and growth opportunity
Paid education and professional development reimbursement to support continued learning, certifications, and technical growth
Flexible work environment
Paid volunteer day each year
Paid Birthday day off
Paid U.S. public holidays
Fully remote within Texas or Florida

Location Requirement

You must be located in Texas or Florida

Nice to Have

Side-channel or fault-injection experience (for example, ChipWhisperer)
RF and wireless work, including SDR, BLE, sub-GHz, or Wi-Fi
Knowledge of secure boot chains, TEEs, secure elements, and HSMs
PCB design familiarity (KiCad / Altium) for understanding target boards
Published CVEs, conference talks, CTF placements, or open-source tooling
Relevant certifications (for example, OSCP for breadth, or hardware-focused training)

What Success Looks Like

Clients gain a clear, accurate understanding of hardware risk with proven, reproducible impact
Findings are credible and actionable for both technical and leadership audiences
Engagements are delivered at a consistently high standard with strong client confidence
Scope and rules of engagement are managed well as engagements evolve, with risk surfaced early and clearly
Packetlabs' hardware testing methodology and lab capability continue to mature through your contribution
Clients trust Packetlabs as the partner that can break hardware before others do

View full job page →

2mo ago

Senior Penetration Tester

UL Solutions Northbrook, IL

Northbrook, IL

2mo ago Closed

$110k - $140k/yr Full time Senior Application Security Binary Analysis

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Senior Penetration Tester to lead security assessment work across embedded, cloud, web, and mobile environments in a hybrid setup from Northbrook, IL.

Responsibilities

Lead end-to-end security assessment engagements covering embedded products, IoT Medical & Industrial devices, Web/Mobile applications, and Cloud infrastructures.
Run comprehensive evaluations including vulnerability discovery, exploitation, code review, fuzzing, binary analysis, and validation of security controls across target environments.
Interpret and apply cybersecurity compliance standards including EN18031, CRA, UK PSTI, and UL Standards for diverse product types; translate requirements into effective test plans.
Partner with clients to understand security objectives; provide technical guidance and deliver professional reports with findings, risk ratings, and remediation recommendations.
Provide high-level technical support for test planning, methodology development, procedure updates, staff training, and resolution of complex quality or testing issues.
Maintain and improve technical knowledge through workshops, professional publications, applicable certifications, professional societies, and cross-departmental task forces.
Track and incorporate latest developments in physical attacks to contribute to internal R&D for both hardware (analog and digital electronics) and software (C, C++, Assembly, and others) to enhance attack capabilities and explore new attack forms.
Implement sophisticated multi-technique attacks using approaches such as vulnerability analysis, signal processing, FPGA, optical, and others.
Conduct security evaluation attacks on smart cards and embedded systems, with emphasis on analyzing real products to identify strengths and weaknesses.
Specialize in innovative physical attacks using laser or EM techniques, applying an in-depth understanding of how products work to stress them with complex hardware techniques.
Perform web application penetration testing covering OWASP Top 10, API security, authentication/authorization flaws, business logic vulnerabilities, and modern web frameworks.
Execute mobile application security assessments for iOS and Android, including static analysis, dynamic analysis, reverse engineering, and platform-specific vulnerability testing.
Conduct cloud security testing and configuration reviews across AWS, Azure, GCP, or multi-cloud environments, focusing on IAM, network security, container/Kubernetes security, serverless architectures, storage security, and cloud misconfigurations.

Requirements

University Degree (equivalent to a Bachelor’s) in Electronic/Computer Science/Computer Engineering/Electrical Engineering or related discipline, plus 3–5 years of related experience.
Good skills in Cloud security testing preferred.
Strong low-level programming capabilities in C, C++, and Assembly, plus scripting experience.
Experience with FPGA, signal processing, or hardware debugging tools is a strong plus.
Comfort using test equipment and working in a multi-skills environment mixing electronic, optical, security, mechanical, and IT.
Excellent written and verbal communication skills, including the ability to explain complex technical concepts to technical and non-technical stakeholders.
Self-motivated team player who can work independently and is interested in bringing new ideas for technical development.

Technologies

C, C++, Assembly
FPGA
OWASP Top 10
iOS, Android
AWS, Azure, GCP
IAM, Kubernetes
Serverless architectures

Benefits

Annual bonus compensation with a target payout of 10% of base salary.
Health benefits: medical, dental, and vision.
Wellness benefits: mental and financial health.
Retirement savings: 401K commensurate with standard rewards offered in each location/country.
Paid time off including vacation (15 days), holiday and personal days (totaling 12 days), and sick time off (72 hours).

Location: Northbrook, IL (hybrid)

Estimated Salary: USD 110,000–140,000 per year

View full job page →

Embedded Iot Security Cybersecurity Jobs

Penetration Tester - Hardware

Senior Penetration Tester

Get Embedded Iot Security Cybersecurity Jobs alerts