Embedded Penetration Tester

Spyrosoft Ltd; Polska; Hybrid; PLN 70,000 - 100,000; Full time

Job summary

Spyrosoft Ltd in Poland is seeking a Penetration Tester with proven track record identifying and exploiting security weaknesses across systems and environments, including embedded platforms. You will apply advanced testing methodologies and report clear, actionable findings to stakeholders.

Experience in embedded security is highly desirable, and strong communication skills are essential to translate complex results into practical recommendations for engineering and management teams.

Qualifications

• Experience identifying and exploiting security weaknesses across systems and environments.
• Strong understanding of embedded security and secure coding practices.
• Excellent communication to translate findings into actionable recommendations.

Responsibilities

• Conduct penetration testing on embedded targets and multi-platform environments.
• Document findings with clear risk assessments and remediation guidance.
• Collaborate with engineering teams to improve security throughout SDLC.

Skills

Penetration testing

Embedded security

CI/CD security

C/C++

Rust

Python

Tools

JTAG

UART

SPI

I²C

Job description

Tech stack:

• Secure boot, firmware security, OTA updates.
• Cryptography (AES, RSA, ECC) & hardware security (TPM, HSM, TrustZone).
• Embedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP.
• Penetration testing on embedded targets: JTAG, UART, SPI, I²C.
• Cloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S).
• Secure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security.

Project description:

We're looking for a Penetration Tester with a proven track record of successfully identifying and exploiting security weaknesses across a wide range of systems and environments. The ideal candidate will have deep expertise in advanced penetration testing methodologies, tools, and reporting, with strong analytical and problem-solving skills. Experience in embedded systems security is highly desirable and will be considered a significant advantage. This role requires excellent communication skills to translate technical findings into clear, actionable recommendations for stakeholders.

About Spyrosoft

Spyrosoft is an authentic, cutting-edge software engineering company, established in 2016. In 2021 and 2022, we were among the fastest growing technology companies in Europe, according to the Financial Times. We were founded by a group of tech experts with established backgrounds in software engineering, who created an ‘engineer-to-engineer’ workplace, powered by enthusiasm, fairness and authentic relationships. Having a unique offering, which bridge the gap between technology and business, we specialise in technology solutions for industry 4.0, automotive, geospatial, healthcare & life sciences, employee experience & education and financial services industries.