Note: The job is a remote job and is open to candidates in USA. Fulcrum Technology Solutions is seeking an Embedded Product Security Engineer to support a client in enhancing the security of embedded systems. The role focuses on technical testing of embedded devices and firmware analysis to identify vulnerabilities and develop exploit paths.
Responsibilities
- Perform penetration testing and vulnerability research across embedded systems, firmware, and IoT devices
- Reverse engineer firmware and binaries to identify security vulnerabilities and exploit paths
- Develop proof-of-concept exploits targeting embedded architectures (ARM and/or x86)
- Conduct fuzz testing against firmware, kernels, and embedded software components
- Analyze wireless protocols including Bluetooth, Zigbee, Z-Wave, Wi-Fi, and proprietary RF systems
- Perform hardware-assisted security testing where applicable (debug interfaces, embedded access points, etc.)
- Conduct deep firmware analysis using reverse engineering tools and methodologies
- Identify vulnerability classes in embedded systems and validate exploitability
- Build or extend tooling for embedded security testing and automation
- Collaborate with engineering teams to validate and reproduce vulnerabilities
- Perform Threat Analysis and Risk Assessments (TARA) across embedded product lines
- Participate in secure architecture reviews and secure-by-design initiatives
- Identify design-level security gaps early in product development lifecycles
- Translate technical findings into actionable remediation guidance for engineering teams
- Document vulnerabilities with clear reproduction steps, severity ratings, and remediation guidance
- Present findings to engineering teams, product stakeholders, and security leadership
- Support PSIRT-style workflows for vulnerability triage and resolution
- Provide guidance on secure development practices and emerging threat trends
Skills
- 4–6+ years of hands-on experience in embedded security, firmware security, or hardware penetration testing
- Strong experience in reverse engineering (Ghidra, IDA Pro, Binwalk, or similar tools)
- Experience with embedded systems programming (C/C++) and scripting (Python preferred)
- Hands-on experience with wireless protocols such as Bluetooth, Zigbee, Z-Wave, or Wi-Fi
- Experience performing fuzz testing or vulnerability discovery in embedded environments
- Understanding of embedded hardware interfaces (UART, JTAG, SPI, I2C, etc.)
- Ability to analyze and exploit vulnerabilities in firmware or embedded systems
- Strong communication skills for documenting and presenting technical findings
- Experience with hardware security tooling (logic analyzers, oscilloscopes, JTAG/SWD tools)
- Experience in exploit development for embedded or IoT systems
- Experience contributing to PSIRT or product security programs
- Familiarity with embedded security standards (IEC 62443, NIST 800-193, etc.)
- Experience in industrial, automotive, medical device, or telecom security environments
- Prior consulting or offensive security research background
- Experience working in lab environments or hardware testing setups
Company Overview