Penetration Tester

The client is seeking a Penetration Tester to conduct application and product security testing across a global environment, focusing on embedded devices and cloud-based services.

Location: United States

Responsibilities

• Perform penetration testing and security assessments across embedded systems, mobile applications, and web applications
• Conduct threat assessments and evaluate products for design or implementation weaknesses
• Research new vulnerabilities and help strengthen existing testing capabilities
• Analyze and bypass security protections where relevant to testing objectives
• Perform data bus monitoring, snooping, and data injection activities
• Conduct protocol analysis across embedded products and applications
• Perform wireless communication channel analysis, including snooping and data injection
• Reverse engineer complex systems, software, and communication protocols
• Produce detailed technical reports and proof-of-concept code to document findings
• Break down systems or products before testing to identify requirements, scope, and resource needs
• Work proactively with engineering teams on testing requirements, progress updates, and findings
• Support issue management in GitLab and help guide junior team members on testing activities
• Assist in driving testing activities across regions and support ongoing improvements to testing processes
• Follow internal security, vulnerability management, and incident response requirements closely

Requirements

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field
• At least 3 years of experience in information security, application security, embedded product security, or IT risk management
• Strong understanding of security protocols, cryptography, authentication, authorization, and general security principles
• Good knowledge of current IT risks and experience implementing security controls or solutions
• Ability to work with a wide range of stakeholders and clearly communicate technical security issues
• Strong written and verbal communication skills
• Able to contribute meaningfully to the secure development lifecycle of products, applications, or services
• Security certifications such as CISSP, OSWE, or equivalent are preferred