Senior Embedded Product Security Tester

Zappsec Inc.; Tewksbury (MA); On-site; USD 140,000 - 200,000; Full time

Job summary

Zappsec Inc. seeks a Senior Product Security Consultant with 10+ years of hands-on testing across embedded devices, firmware security, and hardware interfaces (UART/JTAG/SWD/USB).

You will perform firmware extraction, reverse engineering, and validate secure boot, signing, and update mechanisms. Responsibilities include exploitability validation, attack-path analysis, and remediation guidance, working with architects to meet IEC 62443 and EU CRA controls.

Qualifications

• Strong hands-on penetration testing and product security assessment experience across embedded systems, connected devices, and firmware security.
• Experience with firmware extraction, unpacking, reverse engineering, binary analysis, dynamic analysis, and embedded security testing.
• Familiarity with hardware/device attack surfaces, embedded system architectures, Linux-based systems, network protocols, and secure update mechanisms.
• Ability to assess secure boot, firmware integrity, firmware trust chain, signing, rollback protection, secure update flows, filesystem security, bootloader security, and binary-level risks.
• Experience testing authentication, authorization, encryption, TLS/certificates, cryptographic keys, hardware-backed key storage, device identity, secure elements, TPM, and TEE concepts.
• Experience with exploitability validation, attack path analysis, protocol fuzzing, wireless security testing, and interface testing across UART, JTAG, SWD, USB, BLE, Wi-Fi, and proprietary protocols.

Responsibilities

• Perform hardware and device-level penetration testing
• Conduct firmware extraction, unpacking, and binary analysis
• Assess secure boot, firmware integrity, rollback protection, and update mechanisms
• Evaluate exposed interfaces (USB, network, wireless, serial/debug, administrative services)
• Validate authentication, authorization, encryption, and secure configuration controls
• Conduct exploitability validation, attack path analysis, and privilege escalation testing
• Analyse attack surfaces to identify material security weaknesses across device components
• Perform resilience testing and evaluate effectiveness of security controls
• Test BLE, Wi-Fi, web/API, companion applications and proprietary protocols, including controlled fuzzing
• Work with the Security architect to identify the test cases and the required open-source testing tools to perform the required IEC 62443 and EU CRA controls
• Lead the hardware security testing, authentication, authorization, encryption, and secure configuration controls and other active tools-based testing part of the engagement

Skills

Hands-on penetration testing

Embedded systems security

Firmware extraction

Binary analysis

Reverse engineering

Secure update mechanisms

Hardware security testing

Attack surface assessment

Protocol fuzzing

BLE/Wi-Fi testing

Tools

Binwalk

Ghidra

IDA Pro

Radare2

OpenSSL

Burp Suite

Nmap

Wireshark

GDB

Frida

Firmware emulators

Logic analyzers

Job description

Zappsec Inc. seeks a Senior Product Security Consultant with 10+ years of hands-on testing across embedded devices, firmware security, and hardware interfaces (UART/JTAG/SWD/USB).

You will perform firmware extraction, reverse engineering, and validate secure boot, signing, and update mechanisms. Responsibilities include exploitability validation, attack-path analysis, and remediation guidance, working with architects to meet IEC 62443 and EU CRA controls.