Automotive Embedded Penetration Tester

Location: Plymouth, MI 48170
Onsite: Local Candidates Only (Commute Not to Exceed 60 Miles/60 Minutes)
Final Interview: Mandatory Onsite Interview
Duration: 4-Month Contract
Nearby ZIP Codes: 48170 (Plymouth), 48168 (Northville), 48187 (Canton), 48188 (Canton), 48152 (Livonia), 48154 (Livonia), 48150 (Livonia), 48185 (Westland), 48167 (Novi), 48375 (Novi)
Quick Capture Requirements
Must Have:
1. 3+ years of hands-on Penetration Testing experience focused on Automotive Embedded Systems, IoT Devices, or Specialized Hardware
2. Bachelor's or Master's Degree in Computer Science, Cybersecurity, Computer Engineering, or related technical field
3. Vulnerability Research and Reverse Engineering experience
4. Embedded Security Testing and Fuzzing experience
5. Experience testing automotive embedded targets including ECUs, gateways, vehicle computers, digital clusters, and connected vehicle platforms
6. Automotive communication protocols:
o CAN / CAN-FD
o Automotive Ethernet
o SOME/IP
o DoIP
o LIN
o FlexRay
7. Wireless Security Testing experience:
o Bluetooth / BLE
o Wi-Fi (802.11)
o LTE / 5G
o NFC
o UWB
o RF / Keyless Entry Systems
8. Firmware Extraction and Reverse Engineering
9. Hardware-Level Security Testing
10. Python and C/C++ programming experience
11. Experience with Automotive Cybersecurity standards:
o ISO/SAE 21434
o UNECE WP.29 R155
o MITRE ATT&CK
12. Strong understanding of Automotive E/E Architectures
13. Experience developing comprehensive penetration testing reports and remediation recommendations
Strong Pluses:
1. AI/ML-driven Security Testing
2. AI-enhanced Fuzzing and Vulnerability Discovery
3. Adversarial Machine Learning experience
4. TensorFlow, PyTorch, or Scikit-learn experience
5. RTOS experience:
o QNX
o VxWorks
o AUTOSAR OS
6. Automotive Linux experience
7. Microcontroller expertise:
o Infineon AURIX
o Renesas RH850
o ARM Cortex-R/M
8. Hardware Security Modules (HSM/SHE)
9. SDR Experience:
o HackRF
o USRP
10. Advanced Reverse Engineering using IDA Pro
11. Fault Injection and Side-Channel Analysis
12. Advanced Security Tools:
Vector CANoe
CANalyzer
Vehicle Spy
Wireshark
Burp Suite
GNU Radio
Binwalk
Preferred Certifications:
OSCP
OSCE
OSWE
GXPN
eCPTX
Automotive Security Certifications
IoT Security Certifications