Embedded system enginner / ECU Testing

Acesoft Labs; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Part time

Job summary

Acesoft Labs in Bengaluru invites an experienced embedded system engineer with a focus on automotive cybersecurity. You will perform penetration testing at vehicle, ECU, and component levels, simulating real-world attacks on embedded systems and connected services.

The role requires 7–9 years of total experience, deep knowledge of AUTOSAR/QNX/Linux, coding in C/CAPL, and strong Python/Bash scripting for test automation. Travel and on-site work are expected.

Qualifications

• 4+ years hands-on automotive penetration testing experience
• 7–9 years total experience in embedded systems or related domains
• Strong understanding of vehicle/ECU architecture and automotive cybersecurity
• Familiarity with AUTOSAR, QNX, Linux, Android
• Proficiency in test automation scripting and security testing frameworks

Responsibilities

• Contribute to development and improvement of cybersecurity verification & validation activities
• Define and execute grey-box and black-box penetration testing at ECU, vehicle levels
• Conduct fuzz testing on automotive interfaces and services to uncover vulnerabilities
• Demonstrate compliance with ISO/SAE 21434, UNECE R155, AIS 189, GB 44495
• Perform testing in lab and on-site environments, travel as needed
• Conduct manual security code reviews of embedded software and connected systems
• Document test findings with risk assessments and evidence
• Provide recommendations on security hardening to internal/external teams
• Onboard external suppliers and collaborate on security tasks

Skills

Automotive penetration testing

ECU architecture

Python scripting

C programming

CAPL

Ghidra/IDA Pro

Reverse engineering

Education

Bachelor/Master in Electrical/Electronics Engineering

Embedded Systems degree

Tools

CANoe

vFlash

CANoe.DiVA

Job description

Hi all ,

we are looking for a role of embedded system engineer

Exp : 7 - 9 years

Employment Type : C2H

NP : IMMEDIATE - 15 DAYS

Description:

This role involves conducting and facilitating penetration testing at the vehicle, component, and functional levels. The candidate will simulate real-world attack scenarios targeting embedded systems, automotive interfaces, wireless protocols, and connected services.

Key Responsibilities

• Contribute to the development and continuous improvement of Cybersecurity Verification & Validation (V&V) activities.
• Define, tailor, and execute/facilitate grey-box and black-box penetration testing at ECU, functional, and vehicle levels.
• Conduct fuzz testing on automotive interfaces and services to uncover unknown vulnerabilities.
• Demonstrate compliance with automotive cybersecurity standards and regulations such as ISO/SAE 21434, UNECE R155, AIS 189, and GB 44495.
• Perform penetration testing in both lab and on-site environments, with flexibility for travel.
• Perform manual security code reviews to identify vulnerabilities in embedded software and connected systems.
• Document test findings with detailed risk assessments and technical evidence
• Share with internal and external teams recommendations on security hardening measures
• Onboard and collaborate with competent external suppliers
• Occasionally conduct penetration testing of web applications, APIs, and mobile applications

Required Qualifications

• Bachelors or Masters degree in Electrical/Electronics Engineering, Embedded Systems, Cybersecurity or a related field.
• Minimum 4 years of hands-on experience in automotive penetration testing, with 7–9 years of total experience in embedded systems or broader penetration testing domains.
• Strong understanding of vehicle and ECU architecture, and automotive cybersecurity principles.
• Familiarity with microcontroller platforms and software architectures (e.g., AUTOSAR, QNX, Linux, Android).
• Proficiency in programming (C, CAPL etc.) and scripting (Python, Bash) for test automation.
• Experience with automotive cybersecurity testing frameworks and tools.
• Hands-on security testing experience with:
  • Hardware-level and its interface testing (e.g., MCU, HSM, eMMC, JTAG, UART, Fault injection, Side Channel etc.)
  • Automotive interface/protocols (e.g., OBD, UDS, CAN, Ethernet)
  • Wireless (e.g., Bluetooth, Wi-Fi, Cellular/SDR -4G/5G etc.)
  • Connected Systems (Web/Mobile app, Server, APIs, Cloud etc.)
  • Vehicle and ECU security features (e.g., secure communication, secure OTA, secure boot, secure diagnostics, firewall, IDS, logging etc.)
  • Fuzz testing tools and techniques for automotive systems
• Proficiency in reverse engineering firmware using tools like Ghidra or IDA Pro.
• Experience with restbus simulation, flashing toolchains, and diagnostic tools (e.g., CANoe, vFlash, CANoe.DiVA).
• Experience conducting manual security code reviews for embedded and connected system software.
• Strong documentation, communication, and presentation skills.
• Strong skills in documenting work, communicating clearly, and presenting technical topics to varied audiences.
• Proven stakeholder management skills, including cross-functional collaboration with engineering, compliance, and supplier teams.

Nice-to-Have

• Industry certifications such as OSCP, OSCE, GIAC GPEN, or equivalent.
• Experience with fault injection and side-channel attack simulations.
• Background in security research or conference presentations, including vulnerability discovery, technical publications, or community contributions.

Enable Skills-Based Hiring No