Our client is looking for a Cyber Security Consultant with 5-7 years of relevant experience.

Key responsibilities:

• In-depth analysis of the DUT management interface.
• Detailed analysis of the exposed services (product/version where possible) and of any vulnerabilities present on the WAN interface.
• Reverse Engineering of the secrets employed by the DUT.
• Reverse engineering of the main authentication mechanisms used by the DUT and its services.
• Reverse Engineering of the firmware upgrade process and related images.
• Analysis of the boot process and its phases.
• Analysis of the firmware protection mechanisms and checks on the authenticity and confidentiality of the same.
• Physical dump of main memory (eg NAND) where applicable.
• Simulation of external Servers (PPPoE, TR069, etc) to identify possible vulnerabilities.
• Traffic analysis between CPU and main memory (NAND).
• Creation of custom PoCs for exploiting and/or confirming the identified vulnerabilities
• Preparation of the final report containing all the details to replicate the issues found.

Required qualification:

• Knowledge about Vulnerability Assessment and Penetration test methodologies.
• Knowledge about HW Hacking methodologies (UART, SPI, I2C, JTAG).
• Knowledge Security tools IDAPro, Ghidra, Binary Ninja or Hopper, FRIDA
• Networking Interface protocol stack knowledge:
• Secure Transport Layer socket
• IP Firewalling

Nice to have:

• Security testing Certification
• Cybersecurity Certification

Start: 03.06.2024

Duration: 12 months + extensions

Location: 100% REMOTE

Languages: English

Rate: €150-€180 per day all incl.