[Hiring] Hardware Penetration Tester @Packetlabs Ltd.

Role Description

Packetlabs is looking for a Penetration Tester - Hardware to lead security assessments of embedded and IoT devices, the physical products where a vulnerability lives in silicon, firmware, and board layout, rather than in a web request. The Ethical Hacker - Hardware is a specialized technical role focused on assessing embedded systems across all industries, from consumer IoT to industrial and connected devices. This role involves getting hands-on with a device, opening it up, and proving what an attacker with physical or local access can really do.

This role requires the rare combination of offensive security instinct and genuine hardware fundamentals. You will work directly with clients to understand their devices and deliver findings that improve security posture.

Qualifications

• No egos, ever. Egos don't belong at Packetlabs.
• Customer-first mentality. Excellent communicator with clients, project managers, and teammates.
• Deliver work that you take pride in. Hold yourself to a high standard.
• Digs deeper into every finding. Understands restraint in sensitive OT environments.
• Comfortable being uncomfortable. Adapts to rapidly changing environments.
• Always learning. Committed to improving your skillset.
• Self-motivated and dependable. Takes ownership of work and outcomes.

Requirements

• Plan and execute end-to-end hardware penetration tests on embedded and IoT devices.
• Identify, access, and exploit on-board debug interfaces: JTAG, SWD, UART, and similar.
• Extract firmware via debug ports, in-circuit flash reads (SPI / I2C / NAND), or chip-off when required.
• Intercept and analyze data on common embedded buses (SPI, I2C, UART, CAN, USB).
• Perform side-channel analysis and fault injection where in scope.
• Reverse engineer firmware and embedded binaries to find logic flaws and exploitable conditions.
• Assess physical attack surface, tamper resistance, and key/secret storage.
• Write high-quality technical reports and present findings to client stakeholders.
• Advise on practical, prioritized remediation that clients can act on.
• Build and maintain lab tooling, test rigs, and internal methodology.
• Stay current on hardware attack techniques, embedded architectures, and defensive controls.

Benefits

• Opportunity to work on high-stakes hardware engagements.
• Immediate and ongoing offensive security training, mentorship, and professional development.
• Play a key role in shaping the growth, direction, and methodology of Packetlabs' expanding hardware practice.
• Collaboration with a highly skilled team of security professionals.
• Competitive compensation and growth opportunity.
• Flexible work environment that empowers employees to do their best work.
• Fully remote within Canada.

Education and Experience

• A graduate of an Information Security, Computer Science, or Computer/Electrical Engineering degree program (or equivalent hands-on experience).
• Strong electronics fundamentals. Able to read schematics and datasheets.
• Hands-on soldering ability, including surface-mount (SMD) rework.
• Demonstrated experience accessing debug interfaces (JTAG, SWD, UART).
• Comfort with core bench instruments: logic analyzer, oscilloscope, and multimeter.
• Firmware reverse-engineering skills and scripting proficiency in Python.
• Familiarity with common embedded architectures (ARM/Cortex-M, MIPS, AVR, RISC-V).
• Clear written and verbal communication.

Nice to have

• Side-channel / fault-injection experience (e.g., ChipWhisperer).
• RF and wireless work: SDR, BLE, sub-GHz, Wi-Fi.
• Knowledge of secure boot chains, TEEs, secure elements, and HSMs.
• PCB design familiarity (KiCad / Altium).
• Published CVEs, conference talks, CTF placements, or open-source tooling.
• Relevant certifications (e.g., OSCP for breadth, or hardware-focused training).