{"id":2114508,"url":"https://alion.io/job/spyrosoft-embedded-penetration-tester-2","title":"Embedded Penetration Tester","company":{"id":933,"name":"Spyrosoft","domain":"spyro-soft.com","url":"https://alion.io/company/spyrosoft","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":92,"open_postings":88,"ghost_share":0,"stale_share":0.511,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wrocław, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":100000,"period":"year","method":"role_country_seniority_unknown","sample_n":155},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"MQTT","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"STRIDE","optional":false},{"name":"TCP/IP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C++","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"SBOM","optional":true},{"name":"Wi-Fi","optional":true}],"status":"live","first_seen_at":"2026-09-07T07:49:08Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-23T07:38:39Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":45},"description":"Tech stack:\nSecure boot, firmware security, OTA updates.\n\nCryptography (AES, RSA, ECC) & hardware security (TPM, HSM, TrustZone).\n\nEmbedded interfaces & protocols: CAN, LIN, Modbus, BLE, Wi-Fi, TCP/IP.\n\nPenetration testing on embedded targets: JTAG, UART, SPI, I²C.\n\nCloud IoT platforms & secure communication: AWS/Azure/GCP IoT, TLS/DTLS, MQTT(S).\n\nSecure code review (C/C++, Rust, Python) & DevSecOps / CI/CD security.\n\nRequirements:\nProven experience in embedded systems, IoT security, or product cybersecurity.\n\nHands-on knowledge of secure boot, firmware protection, code signing, and secure update mechanisms.\n\nGood understanding of cryptography and key management in embedded environments.\n\nExperience securing communication protocols and network interfaces in connected devices.\n\nKnowledge of IoT authentication, authorization, and cloud security architectures.\n\nExperience with threat modeling methodologies such as STRIDE, DREAD, and Attack Trees.\n\nAbility to perform security risk assessments aligned with: ISO 21434, IEC 62443, ISO 27005.\n\nUnderstanding of common embedded attack vectors: side-channel attacks, fault injection, firmware tampering, replay attacks, MITM attacks.\n\nExperience conducting penetration testing on embedded targets using interfaces such as JTAG, UART, SPI, and I²C.\n\nExperience with fuzz testing communication stacks (CAN, TCP/IP, MQTT).\n\nUnderstanding of secure SDLC principles, DevSecOps, and cybersecurity lifecycle management.\n\nKnowledge of vulnerability management, system hardening, and threat surface reduction strategies.\n\nUnderstanding of GDPR, HIPAA, and data protection requirements for cloud-connected solutions.\n\nNice to have:\nExperience in regulated industries such as Automotive, Industrial Automation, Medical Devices.\n\nFamiliarity with: IEC 62304, ISO 27001, NIST Cybersecurity Framework, NIST 8259 (IoT Device Cybersecurity).\n\nProfessional security certifications such as: OSCP, GPEN, CompTIA PenTest.\n\nExperience in using AI tools in day-to-day workflow.\n\nProject description:\nWe're looking for a Penetration Tester with a proven track record of successfully identifying and exploiting security weaknesses across a wide range of systems and environments. The ideal candidate will have deep expertise in advanced penetration testing methodologies, tools, and reporting, with strong analytical and problem-solving skills. Experience in embedded systems security is highly desirable and will be considered a significant advantage. This role requires excellent communication skills to translate technical findings into clear, actionable recommendations for stakeholders.\nMain responsibilities:\nDesign and implement security architectures for embedded and IoT solutions.\n\nDefine and maintain secure boot, firmware integrity, code signing, and OTA update strategies.\n\nEstablish secure device provisioning, onboarding, and lifecycle management processes.\n\nConduct threat modeling, security risk assessments, and security reviews throughout the product lifecycle.\n\nAssess and mitigate vulnerabilities across embedded devices, cloud platforms, and communication interfaces.\n\nPerform penetration testing, fuzz testing, and vulnerability assessments on embedded targets and IoT ecosystems.\n\nDrive secure coding practices and perform security-focused code reviews.\n\nCollaborate with development, platform, and cloud teams to integrate security into CI/CD pipelines and development processes.\n\nEnsure compliance with applicable cybersecurity standards and regulatory requirements.\n\nSupport incident response activities, vulnerability remediation, and continuous security improvement initiatives.\n\nManage SBOM creation, maintenance, and software supply chain security activities.","description_format":"text","description_chars":3722,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","IT Outsourcing & Dedicated Teams","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-08T23:15:03Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.252,"p_room":0.35,"age_days":45,"expected_fill_days":16,"reasons":["conf:3","stale_co","velocity","win:tail"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/spyrosoft-embedded-penetration-tester-2","json_url":"https://alion.io/job/spyrosoft-embedded-penetration-tester-2.json","meta":{"generated_at":"2026-10-23T10:26:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15867,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":933},"rest":"https://alion.io/mcp/rest/get_company?id=933"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspyrosoft-embedded-penetration-tester-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspyrosoft-embedded-penetration-tester-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspyrosoft-embedded-penetration-tester-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spyrosoft-embedded-penetration-tester-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspyrosoft-embedded-penetration-tester-2"}]}