Penetration Tester - Hardware (Texas/Florida)

Location: Fully remote within Texas or Florida; candidates must be located in Texas or Florida.

Company

hirify.global is a cybersecurity consulting firm specializing in rigorous, manual penetration testing for clients across government, technology, law enforcement, retail, healthcare, and financial services.

What you will do

• Plan and execute end-to-end hardware penetration tests on embedded and IoT devices within defined scopes and rules of engagement.
• Identify and exploit debug interfaces including JTAG, SWD, UART, and similar interfaces to obtain code execution or memory access.
• Extract and analyze firmware using debug ports, SPI, I2C, NAND, or chip-off techniques, and reverse engineer embedded binaries with tools such as Ghidra, IDA, and Binwalk.
• Analyze embedded buses including SPI, I2C, UART, CAN, and USB using logic analyzers and protocol decoders; assess physical attack surfaces, tamper resistance, and key storage.
• Perform in-scope side-channel analysis and fault injection, including power analysis and voltage or clock glitching.
• Write technical reports, present findings, advise on prioritized remediation, maintain lab tooling and methodology, and contribute to research and knowledge sharing.

Requirements

• Must be located in Texas or Florida.
• Graduate degree in Information Security, Computer Science, or Computer/Electrical Engineering, or equivalent hands-on experience.
• Strong electronics fundamentals, including the ability to read schematics and datasheets and reason about circuit boards.
• Hands-on soldering experience, including surface-mount rework and basic chip removal.
• Demonstrated experience accessing JTAG, SWD, and UART debug interfaces and extracting firmware from real devices.
• Comfort using logic analyzers, oscilloscopes, and multimeters.
• Firmware reverse-engineering skills and scripting proficiency in Python, with enough C to read embedded code.
• Familiarity with ARM/Cortex-M, MIPS, AVR, and RISC-V architectures, plus RTOS and bare-metal concepts.
• Clear written and verbal communication with technical and non-technical stakeholders.

Nice to have

• Side-channel or fault-injection experience, such as with ChipWhisperer.
• RF and wireless experience with SDR, BLE, sub-GHz, or Wi-Fi.
• Knowledge of secure boot chains, TEEs, secure elements, and HSMs.
• PCB design familiarity with KiCad or Altium.
• Published CVEs, conference talks, CTF placements, or open-source tooling.
• Relevant certifications, such as OSCP or hardware-focused training.

Culture & Benefits

• Humble, customer-first environment focused on quality, accountability, continuous learning, and disciplined execution.
• Immediate and ongoing offensive security training, mentorship, and professional development.
• Opportunity to shape the growth and methodology of the hardware security practice.
• Flexible fully remote work environment within Texas or Florida.
• Paid education and professional development reimbursement, a paid volunteer day, paid birthday day off, and paid U.S. public holidays.
• Competitive compensation and growth opportunity.