Penetration tester

Job description

You will join Amaris Consulting within our Automotive teams in Rocester.

Your responsibilities

1) Penetration testing and adversarial assessment

• Plan and execute penetration tests on the products with digital elements: ECUs, telematics units, in-vehicle networks (CAN, J1939, LIN), diagnostic interfaces (UDS/OBD), bootloaders, connected services and mobile/cloud backends.
• Use threat intelligence and TARA outputs to prioritise attack paths and test scenarios.
• Conduct hardware-level assessments: JTAG/UART access, debug interface analysis, firmware extraction and analysis, side-channel awareness.
• Test software components, APIs, update mechanisms and cryptographic implementations as required.

2) Testing evidence and programme assurance

• Produce clear, technically detailed reports: vulnerability description, reproduction steps, severity rating, affected products/versions, and recommended remediation.
• Ensure test outputs meet the coverage and evidence expectations defined by the Senior Engineer – Cybersecurity Compliance for programme assurance.
• Align findings with ISO/SAE 21434 verification and validation requirements and relevant compliance evidence packs.

3) Collaboration with vulnerability management

• Feed confirmed findings directly into the vulnerability management process, with sufficient detail for triage, CVSS scoring and remediation tracking.
• Support the Vulnerability Management Engineer in assessing exploitability of CVEs or supplier-reported issues where hands-on validation is needed.
• Contribute to SBOM-informed testing priorities as component-level intelligence evolves.

4) Continuous improvement

• Capture lessons learned from test engagements and feed them into internal standards, TARA guidance and cybersecurity requirements.
• Stay current with automotive and embedded system attack research, tooling, CVE/CWE trends and threat actor techniques relevant to off-highway machinery.
• Support uplift of engineering teams through knowledge sharing on common vulnerability patterns and secure design.

Qualifications and experience

Essential

• Hands-on penetration testing experience in embedded systems, OT/ICS, automotive or connected products (3+ years)
• Practical experience with automotive protocols: CAN, J1939, LIN, UDS, OBD-II
• Hardware assessment skills: JTAG, UART, logic analysis, firmware extraction
• Familiarity with ISO/SAE 21434 and its verification and validation requirements
• Ability to write clear, technically precise test reports that engineers and compliance stakeholders can both use
• Strong analytical approach: rigorous, evidence-based, reproducible

Desired

• Experience in Tier 1 or OEM sectors (on-highway or off-highway)
• Knowledge of IEC 62443 and CRA requirements, including Article 14 reporting context
• Familiarity with TARA and threat modelling outputs (attack trees, STRIDE, EVITA)
• Experience with tools such as CANalyzer, Wireshark, IDA Pro, Ghidra, Burp Suite, OpenOCD, GreatFET or equivalent
• Awareness of SBOM formats and their role in vulnerability identification
• Relevant certifications: OSCP, CEH, or automotive/embedded-specific equivalents (e.g. TÜV Rheinland Cybersecurity)

About you

• You're methodical. You document everything and your reports are good enough to hold up in a compliance audit.
• You're curious. You read CVE disclosures, follow automotive security research, and probably have test hardware at home.
• You can work across disciplines. Engineering, compliance, suppliers, sometimes legal. You adapt the message without losing the accuracy.
• You're pragmatic. You understand that findings need to land somewhere useful, and you care about closure as much as discovery.

 

Who are we?

Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1,000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.

At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:   

Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you! 

Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!

Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.   

As you know, every person is different and so is every role in a company.  That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience. 
We look forward to meeting you!