About this role
<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>The Impact You'll Make</b></H2> </div><div><p><span style="font-family:Verdana;font-size:14.0pt"> </span></p> <p><span style="font-family:Verdana;font-size:14.0pt">Are you an offensive security expert with a passion for breaking embedded systems? Danfoss is seeking a talented and experienced Penetration Tester to join our Cybersecurity Team in Danfoss Power Solutions. If you're ready to deconstruct cutting-edge hardware, reverse-engineer firmware, and secure the devices that power modern industry, we want to hear from you</span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>What You’ll Be Doing</b></H2> </div><div><p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">As a Cybersecurity Penetration Tester, you will be at the forefront of our product security efforts. Your key responsibilities will include:</span></p> <ul type="disc"> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Performing In-Depth Security Assessments:</strong> Conduct detailed penetration testing on our embedded devices and IoT products. This includes identifying and exploiting vulnerabilities across various attack surfaces, including <strong>CAN interfaces, UDS services (specifically Service 29), and JTAG interfaces.</strong></span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Hardware and Firmware Analysis:</strong> Perform hardware teardowns, reverse-engineer firmware, and analyze binaries to uncover deep-seated vulnerabilities in our products.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Analyzing and Mitigating Vulnerabilities:</strong> Assess the security of cryptographic implementations like <strong>AES-128 and RSA-2k</strong>, evaluate <strong>secure boot</strong> mechanisms, and test <strong>certificate-based authentication</strong> solutions. Collaborate with our teams to develop and implement effective remediation strategies.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Developing Comprehensive Reports:</strong> Create detailed reports outlining your findings, methodologies, and actionable recommendations for stakeholders.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Collaborating with Cross-Functional Teams:</strong> Work closely with security analysts, solution architects, and embedded developers to enhance our security posture from the ground up.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Simulating Real-World Attacks:</strong> Conduct physical security tests focused on device tampering, glitching, side-channel analysis, and other hardware-level attack scenarios.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>What We're Looking For</b></H2> </div><div><p><span style="font-family:Verdana;font-size:14.0pt"> </span></p> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">We are looking for a highly motivated and skilled individual with the following qualifications:</span></p> <ul type="disc"> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Education:</strong> A Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology, or a related field. A Master’s degree is a plus.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Experience:</strong> 2-4 years of hands-on experience in penetration testing, with a strong focus on <strong>embedded systems, IoT, or hardware security.</strong></span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Certifications:</strong> Industry certifications such as Offensive Security Certified Professional (OSCP) are highly desirable. Certifications focused on exploit development or hardware hacking (e.g., OSED, SANS SEC617) are a significant plus.</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Core Embedded Security Expertise:</strong></span></li> <ul type="circle"> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Deep understanding of embedded systems architecture and low-level hardware interfaces (<strong>JTAG, SWD, UART, SPI, I2C</strong>).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Hands-on experience with automotive or industrial communication protocols, particularly <strong>CAN bus and UDS diagnostics.</strong></span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Strong knowledge of embedded security concepts, including <strong>Secure Boot, TrustZone/TEEs, and hardware-backed key storage.</strong></span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Practical experience testing cryptographic implementations (<strong>AES-128, RSA-2k</strong>) and certificate-based authentication schemes.</span></li> </ul> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong>Technical Skills & Tools:</strong></span></li> <ul type="circle"> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Proficiency in scripting and programming languages (Python, Bash, C/C++).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Experience with embedded operating systems (e.g., <strong>Embedded Linux, RTOS like FreeRTOS, QNX</strong>).</span></li> <li style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt">Familiarity with hardware and firmware analysis tools such as <strong>JTAG debuggers (J-Link), logic analyzers, bus sniffers (CANalyzer), Ghidra, IDA Pro,</strong> and firmware extraction tools.</span></li> </ul> </ul> <p><span style="font-family:verdana, geneva, sans-serif;font-size:14.0pt"><strong> </strong></span></p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>What You'll Get from Us</b></H2> </div><div><p><span style="font-family:Verdana;font-size:12.0pt"> </span></p> <ol> <li style="font-size:14.0pt"><span style="font-family:Verdana;font-size:14.0pt">We promote from within and support your learning with mentoring, training, and access to global opportunities.</span></li> <li style="font-size:14.0pt"><span style="font-family:Verdana;font-size:14.0pt">You’ll have flexibility, autonomy, and support to do your best work while maintaining a healthy work-life balance. Your well-being matters to us.</span></li> <li style="font-size:14.0pt"><span style="font-family:Verdana;font-size:14.0pt">We strive to create an inclusive work environment where people of all backgrounds are respected, and valued for who they are. </span></li> <li style="font-size:14.0pt"><span style="font-family:Verdana;font-size:14.0pt">You’ll receive benefits like 13th salary, annual bonus, paid vacation, pension plans, personal insurance, and more. These vary by country and contract, but they’re worth asking about—we think they’re pretty great.</span></li> </ol></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Ready to Make a Difference?</b></H2> </div><div><p><span style="font-family:Verdana;font-size:12.0pt"> </span></p> <p><span style="font-family:Verdana;font-size:12.0pt">If this role excites you, we’d love to hear from you! Apply now to start the conversation and learn more about where your career can go with us.</span></p> <p><span style="font-family:Verdana;font-size:12.0pt"> </span></p> <hr> <p><span style="font-family:Verdana;font-size:12.0pt"> </span></p> <p><span style="font-family:Verdana;font-size:12.0pt">All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or other protected category.</span></p></div></div></div>