Embedded Penetration Tester — IoT & Firmware Security

Talanto; Wrocław; Hybrid; PLN 232,000 - 290,000; Full time

Job summary

Talanto is seeking a skilled Penetration Tester with a focus on embedded and IoT security. You will design secure architectures, enforce secure boot and OTA updates, and perform threat modeling and vulnerability assessments across devices and cloud interfaces.

You will collaborate with cross‑functional teams to integrate security into CI/CD, ensure regulatory compliance, and drive lifecycle security improvements across the product stack.

Qualifications

• Strong experience in embedded systems, IoT security, or product cybersecurity.
• Hands‑on knowledge of secure boot, firmware protection, code signing, and OTA updates.
• Deep understanding of cryptography and key management in embedded environments.
• Experience securing communication protocols and network interfaces in connected devices.
• Knowledge of IoT authentication, authorization, and cloud security architectures.
• Experience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees.

Responsibilities

• Design and implement security architectures for embedded and IoT solutions.
• Define and maintain secure boot, firmware integrity, code signing, and OTA update strategies.
• Establish secure device provisioning, onboarding, and lifecycle management processes.
• Conduct threat modeling, security risk assessments and security reviews throughout the product lifecycle.
• Assess and mitigate vulnerabilities across embedded devices, cloud platforms, and communication interfaces.
• Perform penetration testing, fuzz testing, and vulnerability assessments on embedded targets and IoT ecosystems.
• Drive secure coding practices and perform security‑focused code reviews.
• Collaborate with development, platform, and cloud teams to integrate security into CI/CD pipelines and development processes.
• Ensure compliance with applicable cybersecurity standards and regulatory requirements.
• Support incident response activities, vulnerability remediation, and continuous security improvement initiatives.
• Manage SBOM creation, maintenance, and software supply chain security activities.

Skills

Embedded security

IoT security

Penetration testing

Threat modeling

Secure coding

Tools

JTAG

UART

SPI

I2C

Job description

Talanto is seeking a skilled Penetration Tester with a focus on embedded and IoT security. You will design secure architectures, enforce secure boot and OTA updates, and perform threat modeling and vulnerability assessments across devices and cloud interfaces.

You will collaborate with cross‑functional teams to integrate security into CI/CD, ensure regulatory compliance, and drive lifecycle security improvements across the product stack.