Penetration Testing Engineer

Ethereum Technologies; Plymouth (MI); On-site; USD 120,000 - 180,000; Full time

Job summary

Ethereum Technologies seeks an Automotive Cybersecurity Penetration Testing Engineer to test automotive embedded systems, ECUs, and connected vehicle technologies in Plymouth, MI. You will apply hands-on testing skills to identify vulnerabilities in CAN networks, embedded controllers, and wireless interfaces, delivering actionable remediation guidance.

The ideal candidate has 3+ years of experience, strong scripting skills, and proficiency with tools like Wireshark, CANoe, and IDA Pro.

Qualifications

• Prior automotive cybersecurity/automotive industry experience.
• Hands-on experience with ECUs and automotive embedded systems.
• Strong understanding of CAN/CAN-FD protocols and automotive vehicle networks.
• 3+ years of hands-on experience in penetration testing, vulnerability research, or security testing.
• Proven penetration testing experience beyond fuzz testing.
• Experience with connected/embedded technologies (USB, Bluetooth/BLE, Wi‑Fi, etc.).
• Experience with automotive embedded systems, connected vehicle systems, or specialized hardware.
• Strong scripting/programming skills in Python, C/C++, or Bash.
• Experience with security testing tools such as Wireshark, Burp Suite, CANoe/CANalyzer, or similar.
• Ability to document vulnerabilities and communicate remediation recommendations.
• Strong communication skills with engineering teams and customers.
• Willingness to work 100% onsite in Plymouth, MI.

Skills

Automotive cybersecurity experience

ECUs

CAN/CAN-FD protocols

3+ years hands-on testing

Python, C/C++, Bash

Tools

Wireshark

Burp Suite

CANoe/CANalyzer

IDA Pro

Binwalk

GNU Radio

HackRF

USRP

Vehicle Spy

Vector tools

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

We are seeking anAutomotive Cybersecurity Penetration Testing Engineerwith hands-on experience testing automotive embedded systems, ECUs, and connected vehicle technologies. The ideal candidate will have strong knowledge ofCAN protocolsand practical penetration testing experience beyond basic fuzz testing.

Required Skills:

• Priorautomotive cybersecurity/automotive industry experience.
• Hands-on experience withElectronic Control Units (ECUs)and automotive embedded systems.
• Strong understanding ofCAN/CAN-FDprotocols and automotive vehicle networks.
• 3+ years of hands-on experiencein penetration testing, vulnerability research, or security testing.
• Proven penetration testing experiencebeyond fuzz testing.
• Experience performing security testing on one or more connected/embedded technologies, such as:
  • USB
  • Bluetooth/BLE
  • Wi-Fi
  • Wireless communication systems
  • Other connected or embedded device technologies.
• Experience withautomotive embedded systems, connected vehicle systems, or specialized hardware.
• Strong scripting/programming skills inPython, C/C++, or Bash.
• Experience with security testing and analysis tools such asWireshark, Burp Suite, CANoe/CANalyzer, or similar tools.
• Ability to identify, document, and communicate security vulnerabilities and provide actionable remediation recommendations.
• Strong communication skills with the ability to work directly withengineering teams and customers.
• Ability and willingness to work100% onsite in Plymouth, MI.

Preferred Skills:

• Experience withAutomotive Ethernet, SOME/IP, DoIP, LIN, or FlexRay.
• Experience withfirmware analysis, reverse engineering, or hardware security testing.
• Knowledge ofUART, JTAG, SPI, hardware debugging, or embedded interfaces.
• Experience with tools such asIDA Pro, Binwalk, GNU Radio, HackRF, USRP, Vehicle Spy, or Vector tools.
• Knowledge of automotive operating environments such asQNX, VxWorks, AUTOSAR OS, or Automotive Linux.
• Familiarity withISO/SAE 21434, UNECE WP.29 R155, or automotive cybersecurity practices.
• Experience testingBluetooth/BLE, Wi-Fi, cellular, UWB, NFC, C-V2X, or RF/keyless entry systems.
• Experience with automotive microcontrollers such asARM, Infineon AURIX/TriCore, or Renesas RH850.
• Knowledge ofHSM/SHEand automotive hardware security.
• Experience withAI/ML security, intelligent fuzzing, anomaly detection, or adversarial ML.
• Knowledge ofPython-based data/ML libraries such as NumPy, Pandas, TensorFlow, PyTorch, or scikit-learn.
• Automotive/IoT cybersecurity certifications such asOSCP, OSCE, OSWE, eCPTX, or GXPN.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.