Automotive Security Penetration Engineer

Block Harbor Cybersecurity; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

Block Harbor Cybersecurity is seeking an Automotive Penetration Tester to own the end-to-end engagement lifecycle for securing modern mobility. You will scope requirements, author proposals, and conduct hands-on assessments of embedded ECUs, telematics, and vehicle networks, combining deep vehicle knowledge with adversarial testing.

You will apply both manual techniques and automated tooling to deliver thorough, compliant vulnerability analyses for North American OEMs and tier-1 suppliers, while

Qualifications

• 3+ years of professional experience in offensive security, penetration testing, or hardware security assessment in automotive/embedded domains.
• Hands-on expertise with vehicle architectures and CAN/UDS/Automotive Ethernet.
• Familiarity with security research methodologies and automotive cybersecurity standards.

Responsibilities

• Scope customer requirements and draft test plans and proposals.
• Lead offensive security testing across vehicle interfaces (CAN, LIN, Automotive Ethernet, UDS, DoIP, Bluetooth, Wi-Fi, Web APIs).
• Reverse engineer embedded ECUs and surface vulnerabilities.
• Leverage automated and manual fuzzing to uncover zero-day issues.
• Utilize VSEC platform to manage tests and findings.
• Produce client-ready reports mapped to ISO/SAE 21434/UN R155/NIST.

Skills

Offensive security

Penetration testing

Hardware security assessment

Automotive protocols (CAN/UDS)

Tools

Wireshark

Vector CANalyzer/CANoe

Ghidra

IDA Pro

JTAG/SWD debuggers

Fuzzers

Job description

Block Harbor Cybersecurity is seeking an Automotive Penetration Tester to own the end-to-end engagement lifecycle for securing modern mobility. You will scope requirements, author proposals, and conduct hands-on assessments of embedded ECUs, telematics, and vehicle networks, combining deep vehicle knowledge with adversarial testing.

You will apply both manual techniques and automated tooling to deliver thorough, compliant vulnerability analyses for North American OEMs and tier-1 suppliers, while