19 Sep
|
Acesoft Labs
|
Bengaluru
19 Sep
Acesoft Labs
Bengaluru
Hi all ,
we are looking for a role of embedded system engineer
Exp : 7 - 9 years
Employment Type : C2H
NP : IMMEDIATE - 15 DAYS
Description
This role involves conducting and facilitating penetration testing at the vehicle, component, and functional levels. The candidate will simulate real-world attack scenarios targeting embedded systems, automotive interfaces, wireless protocols, and connected services.
Key Responsibilities
- Contribute to the development and continuous improvement of Cybersecurity Verification & Validation (V&V;) activities.
- Define, tailor, and execute/facilitate grey-box and black-box penetration testing at ECU, functional, and vehicle levels.
- Conduct fuzz testing on automotive interfaces and services to uncover unknown vulnerabilities.
- Demonstrate compliance with automotive cybersecurity standards and regulations such as ISO/SAE 21434, UNECE R155, AIS 189, and GB 44495.
- Perform penetration testing in both lab and on-site environments, with flexibility for travel.
- Perform manual security code reviews to identify vulnerabilities in embedded software and connected systems.
- Document test findings with detailed risk assessments and technical evidence
- Share with internal and external teams recommendations on security hardening measures
- Onboard and collaborate with competent external suppliers
- Occasionally conduct penetration testing of web applications, APIs, and mobile applications
Required Qualifications
- Bachelors or Masters degree in Electrical/Electronics Engineering, Embedded Systems, Cybersecurity or a related field.
- Minimum 4 years of hands-on experience in automotive penetration testing, with 7–9 years of total experience in embedded systems or broader penetration testing domains.
- Strong understanding of vehicle and ECU architecture,
and automotive cybersecurity principles.
- Familiarity with microcontroller platforms and software architectures (e.g., AUTOSAR, QNX, Linux, Android).
- Proficiency in programming (C, CAPL etc.) and scripting (Python, Bash) for test automation.
- Experience with automotive cybersecurity testing frameworks and tools.
- Hands-on security testing experience with:
o Hardware-level and its interface testing (e.g., MCU, HSM, eMMC, JTAG, UART, Fault injection, Side Channel etc.)
o Automotive interface/protocols (e.g., OBD, UDS, CAN, Ethernet)
o Wireless (e.g., Bluetooth, Wi-Fi, Cellular/SDR -4G/5G etc.)
o Connected Systems (Web/Mobile app, Server, APIs, Cloud etc.)
o Vehicle and ECU security features (e.g., secure communication, secure OTA, secure boot, secure diagnostics, firewall, IDS, logging etc.)
o Fuzz testing tools and techniques for automotive systems
- Proficiency in reverse engineering firmware using tools like Ghidra or IDA Pro.
- Experience with restbus simulation, flashing toolchains, and diagnostic tools (e.g., CANoe, vFlash, CANoe.DiVA).
- Experience conducting manual security code reviews for embedded and connected system software.
- Strong documentation, communication, and presentation skills.
- Solid skills in documenting work, communicating clearly, and presenting technical topics to varied audiences.
- Proven stakeholder management skills, including cross-functional collaboration with engineering, compliance, and supplier teams.
Nice-to-Have:
- Industry certifications such as OSCP, OSCE, GIAC GPEN, or equivalent.
- Experience with fault injection and side-channel attack simulations.
- Background in security research or conference presentations, including vulnerability discovery, technical publications, or community contributions.
Enable Skills-Based Hiring No
📌 Embedded system enginner / ECU Testing (Bengaluru)
🏢 Acesoft Labs
📍 Bengaluru