Freelance Consultant- Firmware Senior Engineer

Our Client, a leading Power Technologies Company, is looking for an IoT Penetration Tester with expertise in Wi-Fi and 4G/LTE modules, skilled in wireless security, embedded firmware analysis, and tools like Binwalk, Ghidra, JTAGulator, Logic Analyzer, Wi-Fi Pineapple, Flipper zero, Hydra NFC and Burp Suite.

Key Responsibilities:

• Perform advanced Penetration tests on IoT hardware and firmware
• Perform exploit and vulnerability research on Luminous Firmware products.
• Research fuzz testing tools and conduct penetration test on a variety of products via communication interfaces such as Modbus, Wi-Fi, Bluetooth, and others.
• Perform Black /Grey Box security testing.
• Identify and analyze complex security vulnerabilities and threats through social engineering attacks and manual testing.
• Assess network architecture, configurations for security vulnerabilities.
• Contribute to the development of innovative security testing methodologies and Tools.
• Research and experiment with different types of attacks.
• Ability to perform malware analysis.
• Document security issues and work on the reports.
• Communicate findings to both technical staff and executive leadership.
• Validate security improvements with additional testing

Skills Required

• Experience in performing offensive assessments against IoT devices with 802.11 (Wi-Fi), 4G/LTE and Bluetooth connectivity (including hotspot, STA, AP, and bridge modes).
• Experience in evaluating firmware (secure boot, signed updates, rollback prevention), OTA update pipelines, and bootloader protections.
• Reversing Firmware & Firmware Analysis
• Experience in conducting advanced hardware security assessments: UART/JTAG access, debug interfaces, SWD, IC/SPI sniffing, bus protection, fault injection.
• ARM based exploitation
• Exploiting Real World Devices
• Experience in firmware extraction and analyze binaries for secrets, hardcoded credentials, or unsafe libraries.
• OWASP IoT Top 10
• Understanding of threat modeling
• Threat modeling of IoT Device based solution
• Experience in exploit development for IoT

Qualification

Bachelor's Degree in a related Cybersecurity/IT/Computer Science field.