Penetration Testing Engineer

We are seeking an Automotive Cybersecurity Penetration Testing Engineer with hands-on experience testing automotive embedded systems, ECUs, and connected vehicle technologies. The ideal candidate will have strong knowledge of CAN protocols and practical penetration testing experience beyond basic fuzz testing.

• Prior automotive cybersecurity/automotive industry experience.
• Hands-on experience with Electronic Control Units (ECUs) and automotive embedded systems.
• Strong understanding of CAN/CAN-FD protocols and automotive vehicle networks.
• 3+ years of hands-on experience in penetration testing, vulnerability research, or security testing.
• Proven penetration testing experience beyond fuzz testing.
• Experience performing security testing on one or more connected/embedded technologies, such as:
• USB
• Bluetooth/BLE
• Wi-Fi
• Wireless communication systems
• Other connected or embedded device technologies.
• Experience with automotive embedded systems, connected vehicle systems, or specialized hardware.
• Strong scripting/programming skills in Python, C/C++, or Bash.
• Experience with security testing and analysis tools such as Wireshark, Burp Suite, CANoe/CANalyzer, or similar tools.
• Ability to identify, document, and communicate security vulnerabilities and provide actionable remediation recommendations.
• Strong communication skills with the ability to work directly with engineering teams and customers.
• Ability and willingness to work 100% onsite in Plymouth, MI.

Preferred Skills:

• Experience with Automotive Ethernet, SOME/IP, DoIP, LIN, or FlexRay.
• Experience with firmware analysis, reverse engineering, or hardware security testing.
• Knowledge of UART, JTAG, SPI, hardware debugging, or embedded interfaces.
• Experience with tools such as IDA Pro, Binwalk, GNU Radio, HackRF, USRP, Vehicle Spy, or Vector tools.
• Knowledge of automotive operating environments such as QNX, VxWorks, AUTOSAR OS, or Automotive Linux.
• Familiarity with ISO/SAE 21434, UNECE WP.29 R155, or automotive cybersecurity practices.
• Experience testing Bluetooth/BLE, Wi-Fi, cellular, UWB, NFC, C-V2X, or RF/keyless entry systems.
• Experience with automotive microcontrollers such as ARM, Infineon AURIX/TriCore, or Renesas RH850.
• Knowledge of HSM/SHE and automotive hardware security.
• Experience with AI/ML security, intelligent fuzzing, anomaly detection, or adversarial ML.
• Knowledge of Python-based data/ML libraries such as NumPy, Pandas, TensorFlow, PyTorch, or scikit-learn.
• Automotive/IoT cybersecurity certifications such as OSCP, OSCE, OSWE, eCPTX, or GXPN.