Sign upLog in
See more jobs
Sunrise Systems Inc logo

Automotive Embedded Security Tester (BH ID)

Sunrise Systems Inc
  • Plymouth, MI
  • Quick Apply
11 days ago

Job Description

Job Title: Automotive Embedded Security Tester (BH ID)
Location: Plymouth, MI
Duration:2+ year contract 
 
Key Requirements
 
  • Automotive industry background required
  • Experience with Electronic Control Units (ECUs)
  • Strong understanding of CAN (Controller Area Network) protocols
 
Technical Skills
 
  1. Penetration testing experience
  2. Must have experience beyond fuzz testing
  3. Looking for candidates with security testing experience in one or more of the following areas:
  • USB
  • Wireless communications
  • Bluetooth
  • Similar embedded/connected device technologies
Position Notes: Embedded Security / Pen Testing Engineer
 
Automotive Embedded Security Tester (BH ID)
 
Embedded Systems Penetration & Fuzz Testing
 
  • Design & Execute Campaigns: Build and execute comprehensive penetration testing campaigns against a wide variety of automotive embedded targets.
  • Advanced Fuzzing: Configure and deploy targeted fuzzing frameworks (e.g., AFL++, libFuzzer, Peach, Defensics) against vehicle computers, ECUs, and clusters.
  • Vulnerability Discovery: Uncover memory corruption vulnerabilities (buffer overflows, use-after-free), resource exhaustion, and complex logic flaws that automated static analyzers often miss.
 
Comprehensive Wireless & Wired Protocol Analysis
 
  • Wired Vehicle Networks: Intercept, manipulate, and inject traffic across internal wired topologies, including CAN, CAN-FD, Automotive Ethernet (SOME/IP, DoIP), LIN, and FlexRay. You will utilize industry-standard tools like Vector CANoe/CANalyzer and Vehicle Spy.
  • Wireless Ecosystems: Aggressively analyze and exploit vulnerabilities across every wireless communication interface. This includes deep-dive assessments of Bluetooth/BLE, Wi-Fi (802.11), Cellular networks (4G/LTE, 5G, and C-V2X), UWB, NFC, and traditional RF/Keyless Entry Systems (RKE/PEPS) using Software Defined Radios (SDRs like HackRF, USRP).
 
Hardware & Firmware Reverse Engineering
 
  • Physical Attack Vectors: Conduct hands-on, hardware-level security testing to identify physical attack vectors.
  • Hardware Debugging & Exploitation: Utilize tools like Logic Analyzers, Bus Pirate, J-Link, and UART/JTAG/SPI debuggers, side-channel analysis (SCA), and voltage/clock fault injection techniques.
  • Firmware Analysis: Extract firmware from flash memory for subsequent reverse engineering and static analysis using disassemblers like IDA Pro.
 
AI-Enhanced Fuzzing and Vulnerability Discovery
 
  • Develop and apply AI-driven fuzzing techniques, using machine learning to intelligently guide test case generation and uncover complex vulnerabilities in vehicle software.
  • Utilize ML models to perform automated analysis of source code and binaries, identifying potential zero-day vulnerabilities that evade traditional static and dynamic analysis tools.
 
Automated Anomaly Detection in Vehicle Networks
 
  • Implement and manage machine learning systems to analyze real-time data from CAN, Automotive Ethernet, and wireless channels, automatically detecting anomalous patterns indicative of a cyberattack.
 
Adversarial AI/ML System Testing
 
  • Conduct security assessments of on-board AI/ML systems (e.g., those used for perception, sensor fusion, or decision-making in autonomous driving).
  • Design and execute adversarial attacks (e.g., data poisoning, evasion attacks) to test the resilience and integrity of automotive AI models.
 
Strategic Remediation
 
  • Actionable Reporting: Document findings in meticulous, highly technical reports that include mitigation strategies.
  • Engineering Collaboration: Partner directly with other security tester/consultants to craft actionable, robust remediation strategies that fix the root cause of vulnerabilities.
 
What We Are Looking For
 
Experience & Education
 
  • Bachelor's or Master's degree in Computer Science, Cybersecurity, Computer Engineering, or a heavily related technical discipline.
  • Proven experience in applying AI/ML techniques to cybersecurity challenges, such as intelligent fuzzing, anomaly detection, or securing machine learning systems.
  • 3+ years of hands-on experience in penetration testing, vulnerability research, or reverse engineering, specifically focused on automotive embedded systems, IoT devices, or specialized custom hardware.
 
Deep Technical Expertise & Certifications
 
  • Deep understanding of automotive E/E architectures, RTOS (e.g., QNX, VxWorks, AUTOSAR OS), and POSIX-based systems (Automotive Linux).
  • Familiarity with automotive microcontrollers (e.g., Infineon AURIX TriCore, Renesas RH850, ARM Cortex-R/M) and hardware security modules (HSM/SHE).
  • Strong grasp of industry-standard cybersecurity regulations and frameworks, specifically ISO/SAE 21434, UNECE WP.29 R155, and MITRE Telecommunication&CK.
  • Knowledge of common machine learning frameworks (e.g., TensorFlow, PyTorch, scikit-learn) and their application in a security context.
 
Understanding of adversarial ML concepts and defenses.
 
  • Preferred Certifications: OSCP, OSCE, OSWE, eCPTX, GXPN, or specialized automotive/IoT security certifications.
 
Programming & Tooling Proficiency
 
  • Proficiency in scripting and low-level programming languages such as Python, C/C++, Bash, or Assembly (ARM/x86/TriCore).
  • Experience with data science and machine learning libraries within Python (e.g., Pandas, NumPy).
  • Extensive hands-on experience with hardware/software testing tools (e.g., Oscilloscopes, Wireshark, Burp Suite, GNU Radio, Binwalk).
 
Contact:
Jaya Balaji: jayabalaji.s@sunrisesys.com | (732) 515-5373 | URL: www.sunrisesys.com

Numbers & Facts

LocationPlymouth, MI
IndustryStaffing/Employment Agencies
Company Size100 to 499 employees
Year Founded1990
Websitehttp://www.sunrisesys.com/

About Company

Sunrise Systems was founded in 1990 with a clear vision to deliver world-class staffing service solutions in all labor categories, including IT consulting and solutions; all with the commitment to provide service that exceeds expectations and become the most trusted name in the industry. More than two and a half decades later, we pride ourselves on being at the forefront of the staffing industry. Combining our deep industry expertise, insights, and global resources, we have partnered with our clients to connect them with top professionals across several different industries.

We provide cost-effective Managed Staffing Solutions, Information Technology and Information Technology Consulting Services to several Fortune 500 companies and U.S. Government agencies. We provide our clients with flexible engagement models and customized products that are budget and time specific. Understanding the challenges that every business faces, we offer our services either on-site at the clients' site or from one of our globally distributed technology centers. Our onshore and offshore development capabilities ensure that we excel at meeting customer requirements every single time.

Our collective business experience spans over two and a half decades and ranges from:

  • Business, management, and technical fields
  • Information technology consulting and software solutions.
  • Providing strategic support for the development and long-term growth of new business ventures across several industries including but not limited to; accounting, banking, finance, and recruitment.
  • Motivating technology staff and establishing partnerships with Fortune 500 companies

Sunrise Systems has a vast range of competence in:

  • Design, development, and support of cloud-based solutions from simple to highly complexed
  • Database administration of multi-platform applications, complex databases, and web-based environments that include all aspects of installation, planning, maintenance, and monitoring.
  • Data processing and data migration
  • Application re-engineering and platform migration
  • Working with the Information Systems and end-user communities at all levels to resolve issues and establish consensus.

Skills

  • 4G (4th Generation) Wirelessunmatched
  • 802.11unmatched
  • ARM (Advanced RISC Machine)unmatched
  • Analysis Skillsunmatched
  • Artificial Intelligence (AI)unmatched
  • Automotive Industryunmatched
  • Autonomous Driving Systemsunmatched
  • Bash Scriptingunmatched
  • Bluetoothunmatched
  • Boundary Scanunmatched
  • C Programming Languageunmatched
  • C++ Programming Languageunmatched
  • Campaignsunmatched
  • Channel Strategiesunmatched
  • Computer Engineeringunmatched
  • Computer Scienceunmatched
  • Computer Securityunmatched
  • Controller Area Network (CAN)unmatched
  • Data Scienceunmatched
  • Debugging Toolsunmatched
  • Dynamic Analysisunmatched
  • Ecosystemsunmatched
  • Embedded Systemsunmatched
  • Ethernetunmatched
  • Fuzz Testingunmatched
  • Hardware Debuggingunmatched
  • Hardware Quality Assuranceunmatched
  • IP (Internet Protocol)unmatched
  • ISO (International Organization for Standardization)unmatched
  • Industry Standardsunmatched
  • Injectionsunmatched
  • Internet Securityunmatched
  • Internet of Thingsunmatched
  • Linux Operating Systemunmatched
  • Logic Analyzerunmatched
  • Machine Learningunmatched
  • Machine Toolunmatched
  • Memory Hardwareunmatched
  • Microcontrollerunmatched
  • Network Protocolsunmatched
  • Operating Systemsunmatched
  • Oscilloscopeunmatched
  • POSIX Operating Systemsunmatched
  • Penetration Testingunmatched
  • Programming Languagesunmatched
  • Python Programming/Scripting Languageunmatched
  • QNX Operating Systemunmatched
  • Quality Assurance Softwareunmatched
  • Radio Frequencyunmatched
  • Realtime Operating Systemunmatched
  • Regulationsunmatched
  • Reverse Engineeringunmatched
  • Scripting (Scripting Languages)unmatched
  • Security Analysisunmatched
  • Static Analysisunmatched
  • System Testunmatched
  • Systems Administration/Managementunmatched
  • Systems Analysisunmatched
  • Telecommunicationsunmatched
  • Test Caseunmatched
  • Testingunmatched
  • Topologyunmatched
  • USBunmatched
  • Universal Asynchronous Receiver-Transmitter (UART)unmatched
  • VxWorksunmatched
  • Wi-Fiunmatched
  • Wireless Communicationsunmatched
  • Wireless Securityunmatched
  • Wireshark (Ethereal)unmatched
  • x86 Processorsunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder