Required a Automotive Threat Researcher
Role Overview:
The Security Architecture team works together with vehicle OEMs and tier companies to test and evaluate the security of their products and find vulnerabilities in their design - a process also known as White Box Hacking.
The team also assists them in designing more secure products and mitigation techniques for risks that can't be avoided.
From in-vehicle, through the cloud and all the way to mobile devices - everything goes.
Description:
Research vehicle architectures to discover weak points and design flaws.
Design security mechanisms and mitigation techniques for the automotive world.
Create Security Requirement Specifications for manufacturers to follow.
Research automotive networks and protocols.
Research existing attacks in the automotive world (published and private).
Develop methodologies and attack scenarios for hacking vehicles, starting at entry-point, going through lateral movement and ending in payloads that manipulate the vehicle's functionality and behavior.
Write and deliver reports and workshops to customers.
Requirements:
Over 3 years of hands-on or low-level managerial experience (Team Leader positions) in one or more of the following:
Offensive work or penetration testing in various environments.
Vulnerability research and/or exploit development.
Expert in one or more of the following:
Cryptography and PKI.
Embedded/hardware architecture and security research.
Network security research.
Vulnerability research.
Penetration testing.
Risk assessment.
Secure design (SDLC or other).
Strong analytical skills with attention to small details.
Able to learn new technical domains quickly.
Advantages:
Contingency planning experience (military or other).
Experience in writing detailed reports.
Willing to travel abroad extensively, up to two weeks at a time.