Hybrid Hardware & Product Security Pen Tester

BuddoBot Inc.; Washington (District of Columbia); Hybrid; USD 130,000 - 145,000; Full time

Job summary

Dark Wolf is actively seeking an experienced Penetration Tester to assess and enhance security across hardware, software, and embedded systems. Hybrid work setup in the DC Metro area, with a focus on identifying and mitigating vulnerabilities through advanced exploit development.

The role emphasizes cross-domain testing, including web and API security, RF testing, and secure boot/TEE evaluation, backed by strong communication and reporting capabilities.

Qualifications

• Bachelor's degree in Cybersecurity or related field required.
• Minimum 2+ years in three or more areas: cybersecurity, penetration testing, reverse engineering, or exploit development.
• US citizenship and active security clearance at Secret level required.
• Experience with cloud deployments across AWS, Azure, or GCP required.
• Experience drafting reports and summarizing findings for remediation.

Responsibilities

• Conduct comprehensive penetration testing on hardware, software, and network components.
• Perform advanced vulnerability scanning and assessments across all components.
• Develop and execute exploits and PoCs to demonstrate impact and guide remediation.
• Analyze firmware, hardware, software, and RF components for security weaknesses.
• Provide high-level remediation strategies and risk assessments to stakeholders.

Skills

Penetration testing

Exploit development

Reverse engineering

Vulnerability assessment

Wireless testing

Education

Bachelor's degree in Cybersecurity

Tools

AWS/Azure/GCP

SDR tooling

Job description

Dark Wolf is actively seeking an experienced Penetration Tester to assess and enhance security across hardware, software, and embedded systems. Hybrid work setup in the DC Metro area, with a focus on identifying and mitigating vulnerabilities through advanced exploit development.

The role emphasizes cross-domain testing, including web and API security, RF testing, and secure boot/TEE evaluation, backed by strong communication and reporting capabilities.