Ethical Hacker (all genders) (Embedded Automotive)

• You will work on site in Ingolstadt, Berlin or Stuttgart as a Ethical Hacker (all genders) for automotive ECUs.
• Targeted pentesting/security analysis of ECU features at all levels - e.g. secure boot, secure OS/TEE, secure protocol implementation, key management systems, debug access activation methods, paid feature activation, system architecture, etc.
• Analysis, verification and reproduction of security incidents.
• Liaising with ECU SW developers to explain security issues and provide feedback on proposed solutions.
• Supporting the security test developers by providing input to new features and regression test development.
• Tech scouting and evaluation of new security software and hardware technologies.

   

• Our approaches to address challenges holistically:
  Reverse engineering, fuzzing (custome fuzzer development), PoC exploit development, source code review, hardware tampering, design reviews.

• We use these technologies/systems:
  modern automotive embedded systems, secure boot in all facets, baseband (LTE/GSM), Android/Linux/Autosar, CAN/Ethernet

Must have:

• Very good knowledge of cyber security, embedded systems and cryptography, which you are passionate about developing on a daily basis.

• Relevant professional experience with pentesting and/or offensive security and reverse engineering.

• Very strong (embedded) Linux knowledge.

• Fluency in written and spoken English.

Nice to have:

• A relevant tertiary qualification with a security component.
• Knowledge of common automotive protocols.
• Experience with automotive bus and protocol analysis tools.
• Previous participation in CTF's.
• OSCP certification.