Embedded Testing

Embedded Testing Cybersecurity Jobs

3 jobs found

Today

Penetration Tester - Hardware

Packetlabs Texas/Florida 📍 Texas/Florida Remote

Texas/Florida

Today

$80k - $120k/yr Full time Cybersecurity Tools Data Security Embedded Firmware

Apply Now

Job Description

Packetlabs is building out its hardware security practice and is hiring a Penetration Tester - Hardware for remote work across Texas/Florida. In this role, you will lead end-to-end security assessments for embedded and IoT devices, combining bench testing with firmware reverse engineering to surface vulnerabilities clients can fix.

What you’ll do

Plan and execute end-to-end hardware penetration tests on embedded and IoT devices within a defined scope and rules of engagement
Identify, access, and exploit on-board debug interfaces such as JTAG, SWD, UART, and similar paths to reach code execution or memory access
Extract firmware through debug ports, in-circuit flash reads (SPI/I2C/NAND), or chip-off when needed, then analyze for vulnerabilities
Intercept and analyze data on embedded buses including SPI, I2C, UART, CAN, and USB using logic analyzers and protocol decoders
When in scope, perform side-channel analysis and fault injection such as power analysis and voltage/clock glitching to bypass secure boot, readout protection, or authentication
Reverse engineer firmware and embedded binaries using tools like Ghidra, IDA, and Binwalk to uncover logic flaws, hardcoded secrets, and exploitable conditions
Assess physical attack surface, tamper resistance, and key or secret storage
Separate theoretical risk from operationally relevant findings to keep results actionable
Produce clear technical reports and present findings to client stakeholders, supporting both technical and non-technical audiences
Advise on practical, prioritized remediation clients can implement
Build and maintain lab tooling, test rigs, and internal methodology
Contribute to research, responsible disclosure, and internal knowledge-sharing
Stay current on hardware attack techniques, embedded architectures, and defensive controls
Help raise the standard of hardware security work across the firm

Skills and experience

Graduate of an Information Security, Computer Science, or Computer/Electrical Engineering degree program (or equivalent hands-on experience)
Strong electronics fundamentals, including the ability to read schematics and datasheets and reason about boards
Hands-on soldering skills, including SMD rework and basic chip removal
Demonstrated experience accessing debug interfaces (JTAG, SWD, UART) and extracting firmware from real devices
Comfort with core bench instruments: logic analyzer, oscilloscope, and multimeter
Firmware reverse engineering with scripting in Python, plus enough C to understand embedded code
Familiarity with embedded architectures including ARM/Cortex-M, MIPS, AVR, and RISC-V, along with RTOS and bare-metal concepts
Clear written and verbal communication
Must be located in Texas or Florida

Tools and technologies

Debug and interfaces: JTAG, SWD, UART, SPI, I2C, NAND, CAN, USB
Bench instruments and analysis: logic analyzer, oscilloscope, multimeter, protocol decoders
Reverse engineering and scripting: Ghidra, IDA, Binwalk, Python, C
Embedded platforms and concepts: ARM/Cortex-M, MIPS, AVR, RISC-V, RTOS, bare-metal
Security and research tooling: ChipWhisperer, secure boot chains
Additional platforms noted: TEEs, secure elements, HSMs, SDR, BLE, Wi-Fi, KiCad, Altium
Certs and related areas: OSCP

Nice to have

Side-channel and fault-injection experience such as ChipWhisperer
RF and wireless work including SDR, BLE, sub-GHz, and Wi-Fi
Knowledge of secure boot chains, TEEs, secure elements, and HSMs
PCB design familiarity with KiCad or Altium
Published CVEs, conference talks, CTF placements, or open-source tooling
Relevant certifications, for example OSCP or hardware-focused training

Compensation and benefits

The salary range for this role is USD 80,000 - 120,000 per year (remote within Texas or Florida). Packetlabs also provides offensive security training, mentorship, and professional development reimbursement, along with a flexible work environment, a paid volunteer day, paid Birthday day off, and paid U.S. public holidays.

Additional expectations

No ego culture and a focus on continuous learning and humility
A customer-first mindset with responsive, professional communication
Work quality that demonstrates credibility and proven impact
Depth in validating findings, with appropriate restraint in sensitive OT environments
Adaptability to changing consulting environments and comfort tackling difficult technical obstacles
Self-motivation and ownership of outcomes
Location requirement: Texas or Florida

What success looks like

Clients receive a clear, accurate understanding of hardware risk backed by proven, reproducible impact
Findings are credible, actionable, and relevant for both technical and leadership audiences
Engagements are delivered to a consistently high standard with strong client confidence
Scope and rules of engagement are managed well as engagements evolve, with risk surfaced early and clearly
Packetlabs hardware testing methodology and lab capability continue to mature through your contribution
Clients trust Packetlabs as the partner that can break their hardware before someone else does

View full job page →

1mo ago

Senior Penetration Tester - Web & Hardware/IoT

JPMorganChase Chicago, IL

Chicago, IL

1mo ago Closed

$133k - $225k/yr Full time Senior Application Security Cloud Platforms

This position is no longer accepting applications (closed Sep 13, 2026).

Job Description

As an Assessments & Exercises Vice President, you will plan, execute, and report penetration tests for critical banking applications and platforms, with a primary focus on web, APIs, cloud, and related environments, and a limited scope extending to banking hardware and IoT endpoints. This onsite role is based in Chicago, IL.

Key Responsibilities

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications, with a primary focus on thick-client and/or mobile application testing.
Conduct security assessments of banking hardware and connected/IoT technologies, including ATMs, Point of Sale (POS) devices, and other embedded endpoints.
Collect and validate engagement pre-requisites, including access, documentation, and approvals, and manage lab or onsite testing logistics and device access when applicable.
Carry out manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, using industry-standard tools and custom scripts.
Produce comprehensive penetration test reports that document technical details, risk assessments, and actionable remediation recommendations.
Perform peer reviews of penetration test reports to support accuracy, consistency, and quality of deliverables.
Partner with development, infrastructure, security, and device or product engineering teams to clarify findings, support remediation, and provide offensive security subject matter expertise.
Keep current on emerging threats, vulnerabilities, and attack techniques through threat intelligence, security research, and active participation in relevant industry groups.
Help improve penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required Qualifications

5+ years of hands-on penetration testing experience in offensive security, including demonstrated ability to scope, execute, and report on complex engagements.
Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile (Android/iOS) applications, including use of industry-standard tools such as Burp Suite, Nmap, and Metasploit.
Working knowledge of testing approaches for connected devices/IoT and purpose-built banking devices (for example, ATMs and POS), including common attack surfaces such as exposed services, remote administration paths, authentication and authorization, hardening gaps, and insecure configurations.
Strong familiarity with security assessment methodologies including OWASP Top Ten and the NIST Cybersecurity Framework, along with other relevant standards.
Ability to identify and clearly articulate systemic security issues tied to threats, vulnerabilities, and risks, along with actionable remediation recommendations.
Strong organizational and communication skills, including capability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
A continuous learning mindset to keep up with the latest offensive security trends, tools, and techniques.

Technologies

Burp Suite
Nmap
Metasploit
OWASP Top Ten
NIST Cybersecurity Framework
AWS, Azure, GCP
Android, iOS

Preferred Qualifications

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews using languages such as Python, Java, and Rust.
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Experience assessing embedded systems and IoT devices in lab or onsite environments, including device interface review, firmware/configuration analysis, and network or service exposure testing relevant to ATM/POS ecosystems.
Relevant certifications including OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

Location and Salary

Location: Chicago, IL (onsite)

Compensation: USD 133,000 - 225,000 per yearly

Additional Locations

This position is also open in:

New York, NY
Atlanta, FL
Plano, TX
Columbus, OH
McLean, VA
Wilmington, DE
Jersey City, NJ
Tampa, FL
Brooklyn, NY
Houston, TX
Washington, DC

Benefits

Base salary determined based on the role, experience, skill set, and location
Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation
Paid in the form of cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Position Opening

This role requires a minimum of 5 years of relevant experience.

View full job page →

2mo ago

Senior Penetration Tester - Web & Hardware/IoT

JPMorganChase Chicago, IL

Chicago, IL

2mo ago Closed

$133k - $225k/yr Full time Senior Api Testing Application Security

This position is no longer accepting applications (closed Aug 12, 2026).

Job Description

The Senior Penetration Tester will lead hands-on assessments for JPMorganChase across web, API, cloud, infrastructure, and limited banking hardware and IoT environments, overseeing planning, execution, reporting, and remediation guidance with stakeholders.

Responsibilities

Plan, scope, and execute penetration testing engagements across web applications, APIs, cloud platforms, infrastructure, thick-client, and mobile applications (primary focus).
Perform security assessments of banking hardware and connected/IoT technologies (limited but expected), including ATMs, POS devices, and other embedded endpoints.
Collect and validate pre-requisites for each engagement, ensuring access, documentation, and approvals are in place (including lab/onsite testing logistics and device access where applicable).
Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
Document and communicate findings through comprehensive reports with technical details, risk assessments, and actionable remediation recommendations.
Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
Collaborate with development, infrastructure, security, and device/product engineering teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive security.
Stay current with emerging threats, vulnerabilities, and attack techniques by leveraging threat intelligence, security research, and participation in relevant industry groups.
Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks to align with firm strategy and regulatory requirements.

Requirements

5+ years of hands-on penetration testing experience in offensive security, with a proven track record of scoping, executing, and reporting on complex engagements.
Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile (Android/iOS) applications, including use of industry-standard tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
Working knowledge of testing approaches for connected devices/IoT and purpose-built banking devices (e.g., ATMs, POS), including common attack surfaces such as exposed services, remote administration paths, authentication/authorization, hardening gaps, and insecure configurations.
Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
Ability to identify and articulate systemic security issues related to threats, vulnerabilities, and risks, and provide clear, actionable remediation recommendations.
Exceptional organizational and communication skills, including the ability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
Experience conducting peer reviews of penetration test reports and mentoring junior testers.
Continuous learner who keeps up with the latest offensive security trends, tools, and techniques.

Technologies

Burp Suite
Nmap
Metasploit
AWS
Azure
GCP
Android
iOS
Python
Java
Rust
Windows
Unix-like

Benefits

Base salary determined by role, experience, skill set and location
Commission-based pay and/or discretionary incentive compensation, paid in cash and/or forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Preferred Qualifications, Capabilities, and Skills

Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
Experience assessing embedded systems / IoT devices in lab or onsite environments (e.g., device interface review, firmware/configuration analysis, and network/service exposure testing) relevant to ATM/POS ecosystems.
Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP.

View full job page →

Embedded Testing Cybersecurity Jobs

Penetration Tester - Hardware

Senior Penetration Tester - Web & Hardware/IoT

Senior Penetration Tester - Web & Hardware/IoT

Get Embedded Testing Cybersecurity Jobs alerts