- Remote, United States +1 more
- Remote
- Full-time · Senior
Lead security assessments of embedded and IoT devices, the physical products where a vulnerability lives in silicon, firmware, and board layout, rather than in a web request.
Locations (2)
- Texas, United States
- Florida, United States
Responsibilities
- Plan and execute end-to-end hardware penetration tests on embedded and IoT devices
- Identify, access, and exploit on-board debug interfaces: JTAG, SWD, UART, and similar, to gain code execution or memory access
- Extract firmware via debug ports, in-circuit flash reads (SPI / I2C / NAND), or chip-off when required, and analyze it for vulnerabilities
- Intercept and analyze data on common embedded buses (SPI, I2C, UART, CAN, USB) using logic analyzers and protocol decoders
- Where in scope, perform side-channel analysis and fault injection (power analysis, voltage/clock glitching) to bypass secure boot, readout protection, or authentication