Senior Hardware Security Researcher

Job Title: Senior Hardware Security Researcher Key Responsibilities

• Conduct hardware and firmware security assessments, combining physical and logical attack techniques to identify and exploit vulnerabilities.
• Perform memory extraction from Flash, EEPROM, NOR/NAND, or other storage devices.
• Reverse engineer firmware and binaries using tools such as Ghidra, IDA Pro, Binary Ninja, or radare2 to uncover security weaknesses.
• Implement and automate custom test benches and toolchains for HW/SW analysis.
• Execute and analyse side-channel attacks (CPA, DPA, EM, timing, TVLA) and fault injection campaigns (voltage glitching, EMFI, laser) on embedded targets.
• Analyse secure boot, cryptographic primitives, and firmware protection mechanisms to identify design and implementation weaknesses.
• Interface with embedded systems through JTAG, SWD, UART, SPI, and similar debug or communication protocols.
• Deliver clear, well-documented technical reports. Required Qualifications
• At least 5 years of experience of hands-on experience in hardware or embedded system security, covering both physical and logical attack surfaces.
• Proven experience performing firmware extraction and analysis (memory dumping, patching, and reconstruction).
• Experience with side-channel analysis and/or fault injection (voltage glitching, EMFI, laser, etc.), and commercial platforms, such as Chip. Whisperer or/and Riscure Inspector.
• Strong understanding of applied cryptography, secure protocol design, and embedded crypto implementations.
• Experience with embedded systems (ARM Cortex-M, RISC-V, STM32, etc.) and debugging interfaces (JTAG, SWD, UART, SPI).
• Advanced programming skills in Python, C, and assembly for hardware interfacing and comfortable working in Linux environments with build systems, cross-compilation, and version control (git).
• Solid knowledge of lab instrumentation: oscilloscopes, logic analyzers, pulse generators, etc, as well as reverse engineering tools and techniques (Ghidra, IDA Pro, Binary Ninja, radare2, ARM/RISC-V disassembly).