PEN TEST ENGINEER

at  Intec Select

OVERVIEW:

A leading global consultancy are looking for an experienced Pen Test Engineer, you will be responsible for defining and implementing Penetration Test Strategy from the 2nd line of Defence viewpoint for the governance of ECU and Vehicle and Offboard Penetration Testing.

ESSENTIAL SKILLS AND EXPERIENCE:

Experience in creating Python scripts from scratch to perform tests on CAN (mandatory) and Flexray (desirable) busses, as well as automotive ethernet (desirable) – venv, python-can experience mandatory.
Experience in Git is required to develop user-friendly and automated Penetration Testing frameworks.
Good understanding of automotive communication buses (CAN and Ethernet).
Knowledge of diagnostics and debugging interfaces (UDS ISO 14229, ASM XCP minimum).
Penetration Testing experience (automotive and/or IoT) required, especially black box testing, wireless interfaces, and API testing.
Experience analysing security protocols used in automotive/embedded systems/IoT devices.
Ability to plan and execute ECU level & vehicle level Penetration Tests, according to given test scope.
Experience in security assessment and Penetration Testing Tools within Vehicle Electrical Architecture and external interfaces such as Bluetooth, WiFi, and Mobile Communications.
Proven experience in Vehicle Diagnostics and understanding of Systems Engineering Principals, and Requirements development.
Experience leading engineers from outsourced partners and suppliers.
Good capability in leadership, management and self-motivation. Ability to work independently and within a test lab with experience working in an agile environment.

Define Penetration Test Strategy from the 2nd line of Defence viewpoint for the governance of ECU and Vehicle and Offboard Penetration Testing.
Support the development of security testing within the Hardware in The Loop, (HiLs), test rigs.
Review and agree penetration test scopes and helping project teams to liaise with preferred Pen Test Suppliers.
Collect, analyse, and prepare reports required for senior management, regulators, and other relevant stakeholders and review penetration test results, inform SOC and CISO of any high/critical risks identified.
Embrace differences, being empathetic. Welcome challenges empowering other team members to deliver. Build trust by speaking openly and honestly, listening attentively, and treating others respectfully.
Make a difference through results. Communicate effectively with stakeholders.
Report to the Pen Test Manager on work and deliverables.