Required QualificationsEngineering Degree in CS, E&TC, EE, Cybersecurity—or equivalentexperience - 7-12 yearsIndustry - Automotive, Information Technology, Mechatronics, AutomationStrong hands-on with embedded/automotive protocols (CAN, UDS, DoIP, SOME/IP) and industrial/IoT protocols (Modbus, OPC UA, PROFINET, EtherNet/IP; plus wired/wireless Fieldbus/LoRa/WirelessHART).Proficiency in tools: CANoe/CANalyzer/SocketCAN; Burp, Metasploit, Nmap, Wireshark.Key ResponsibilitiesPlan and perform end-to-end penetration tests on ECUs, gateways, TCUs, infotainment, ADAS-related ECUs, IoT and medical/industrial devices.Assess in-vehicle networks (CAN, LIN, FlexRay, Automotive Ethernet) and design realistic attack chains across vehicle, mobile, cloud/back-endAlign methods with ISO/SAE 21434, UNECE R155/R156, NIST SP 800, OWASP/ASVS/MAS/MASTG, ISA/IEC 62443.Collaborate with firmware, hardware, cloud, DevOps, and systems teams; present risks and remediation to customers and stakeholders.Drive architecture reviews, threat modeling (TARA) and attack surface analysis; contribute to work products and reportsConduct firmware/boot-chain testing (secure boot, OTA) and embedded Linux/RTOS security reviews.Execute hardware-level testing (JTAG/UART/SPI/I²C, flash extraction, debug interface analysis) and support SDR/RF assessments.Lead security architecture reviews, threat modeling (TARA), and attack-surface reduction across platforms.Set and evolve methodologies aligned to ISO/SAE 21434, UNECE R155/R156, NIST SP 800, OWASP/ASVS/MAS/MASTG, ISA/IEC 62443; ensure audit-readinessBuild/extend tools, scripts, and exploits to validate real-world attacks; leverage AI/ML tools where beneficial.Mentor junior testers; improve team practices, tooling, and reporting quality.
Job Title
Lead Cyber Security Engineer- Penetration Tester