Embedded Security Consultant

Redlings GmbH; EE. UU.; A distancia; USD 94.000 - 133.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote-first

Flexible hours

Lab access Mannheim

Descripción de la vacante

Redlings GmbH in Germany seeks an embedded security engineer to assess the security of its embedded products by examining devices, firmware, boot processes, interfaces, and backend communications. The role combines hands-on hardware access with software analysis to trace how architecture and implementation affect security from device identity through backend connections.

You will work hands-on with hardware and software analysis, applying knowledge of bootloaders, secure boot, firmware updates,

Formación

• Practical embedded Linux experience and firmware extraction, unpacking, and analysis skills.
• Familiarity with ARM or AArch64 fundamentals, bootloaders, secure boot, and firmware updates.
• Hands-on experience with UART, JTAG, or SWD, and flash or memory handling.
• Ability to use Ghidra or IDA, write Python scripts, and perform basic protocol analysis.
• RTOS, BLE, or wireless technology experience is a plus.
• Familiarity with secure elements, TPM, or TrustZone is desirable.
• Experience with fuzzing, hardware debugging, exploitability analysis, memory corruption, or proprietary protocols is a plus.

Responsabilidades

• Assess boot chains, secure boot, firmware update flows, and readout protections.
• Access and analyze devices through interfaces such as UART, JTAG, and SWD; extract and inspect flash or memory contents.
• Unpack firmware and investigate filesystems, configuration, embedded secrets, and third-party components.
• Analyze communications among devices, gateways, and backends, including proprietary protocols.
• Evaluate how key storage and identity mechanisms are implemented and what protections they provide in context.
• Produce security assessments that require understanding a product rather than applying a fixed checklist.

Conocimientos

Embedded Linux

Firmware extraction

ARM/AArch64 fundamentals

Bootloaders/Secure boot

UART/JTAG/SWD

Flash/memory handling

Ghidra/IDA

Python scripting

Protocol analysis

Herramientas

Ghidra

IDA

Python

Descripción del empleo

Role overview

Assess the security of embedded products by examining the device itself, its firmware, boot process, interfaces, and communications. The work combines hands‑on hardware access with software analysis, tracing how product architecture and implementation affect security from device identity through backend connections.

Responsibilities

• Assess boot chains, secure boot, firmware update flows, and readout protections.
• Access and analyze devices through interfaces such as UART, JTAG, and SWD; extract and inspect flash or memory contents.
• Unpack firmware and investigate filesystems, configuration, embedded secrets, and third‑party components.
• Analyze communications among devices, gateways, and backends, including proprietary protocols.
• Evaluate how key storage and identity mechanisms are implemented and what protections they provide in context.
• Produce security assessments that require understanding a product rather than applying a fixed checklist.

Requirements

• Practical embedded Linux experience and firmware extraction, unpacking, and analysis skills.
• Familiarity with ARM or AArch64 fundamentals, bootloaders, secure boot, and firmware updates.
• Hands‑on experience with UART, JTAG, or SWD, and flash or memory handling.
• Ability to use Ghidra or IDA, write Python scripts, and perform basic protocol analysis.

Nice to have

• RTOS, BLE, or other wireless technology experience.
• Familiarity with secure elements, TPM, or TrustZone.
• Experience with fuzzing, hardware debugging, exploitability analysis, memory corruption, or proprietary protocols.

Benefits and work setup

• Permanent, remote‑first position with flexible hours and occasional lab days in Mannheim; most device work can be done remotely. Invasive analysis takes place in the lab or at customer sites and is infrequent.
• Access to a working hardware lab with devices, probes, and logic analyzers; time and budget for research, tools, publications, certifications, and conferences.
• Senior‑led technical reviews. The role also offers exposure to fault injection, decapsulation, side‑channel evaluation, and coordinated disclosure.