Penetration Engineer
Job description
Penetration Engineer at Everstar
About the role
Join a dedicated R&D team focused on creating real-world electronic solutions for demanding environments. We are expanding and seeking a Penetration Engineer to enhance the security of our Linux embedded devices before they are deployed.
Key facts
What you'll do
Conduct white-box and black-box penetration tests on custom Linux and bare-metal devices.
Identify and exploit vulnerabilities in security mechanisms like secure boot, data encryption, and firmware loading.
Develop proof-of-concept exploits to demonstrate identified weaknesses.
Stress-test system defenses, including firewalls and USB access controls.
Contribute to secure software development lifecycle by defining security requirements and reviewing architectural designs.
Research emerging threats and attack vectors to proactively address potential risks.
Document findings in detailed reports and provide actionable recommendations for remediation.
Requirements
A minimum of 2-4 years of practical experience in penetration testing and vulnerability exploitation across various systems, including Linux-based hardware.
Strong understanding of common software security flaws, such as memory corruption, injection vulnerabilities, and integer overflows, along with mitigation strategies.
In-depth knowledge of operating system architectures, particularly Linux, including its kernel, boot process, bootloaders, resource management, and networking.
Proficiency in networking concepts and associated tools like firewalls, VPNs, Wireshark, and nmap.
Nice to have
Experience with scripting or programming in Python, Bash, or C/C++ for exploit development.
Familiarity with low-level code analysis, specifically understanding Assembly execution, ideally for ARM architecture.
Skills & tools
Linux Embedded Systems, Penetration Testing, Vulnerability Exploitation, Secure SDLC, Threat Research, Python, Bash, C/C++, Assembly, ARM, Wireshark, nmap.
Practical notes
Compensation is competitive and includes bonuses and performance-based awards.
We offer 24 calendar days of annual leave, plus an additional day for your birthday.
Enjoy a flexible work schedule with up to 10 remote workdays per year.
Comprehensive medical insurance is provided after the probationary period.
Support for professional development includes training, courses, and access to a corporate library.
Mental health support is available through company-sponsored psychologist consultations.
We provide military reservist registration assistance.
Relocation financial support is available for candidates moving from other cities or countries.
The company operates under Diia.City regulations.