Senior Hardware Security Researcher
Technology Innovation Institute ·
- Seniority
- Senior
- Category
- Security
- Experience
- 5+ years
Technology Innovation Institute ·
Technology Innovation Institute is hiring a Senior Hardware Security Researcher to run hardware and firmware security assessments: extracting memory, reverse-engineering firmware, and executing side-channel and fault-injection attacks on embedded targets. The core stack includes Ghidra/IDA Pro, ChipWhisperer/Riscure Inspector, Python/C/assembly, and ARM/RISC-V embedded platforms.
Job Title: Senior Hardware Security Researcher
Key Responsibilities
· Conduct hardware and firmware security assessments, combining physical and logical attack techniques to identify and exploit vulnerabilities.
· Perform memory extraction from Flash, EEPROM, NOR/NAND, or other storage devices.
· Reverse engineer firmware and binaries using tools such as Ghidra, IDA Pro, Binary Ninja, or radare2 to uncover security weaknesses.
· Implement and automate custom test benches and toolchains for HW/SW analysis.
· Execute and analyse side-channel attacks (CPA, DPA, EM, timing, TVLA) and fault injection campaigns (voltage glitching, EMFI, laser) on embedded targets.
· Analyse secure boot, cryptographic primitives, and firmware protection mechanisms to identify design and implementation weaknesses.
· Interface with embedded systems through JTAG, SWD, UART, SPI, and similar debug or communication protocols.
· Deliver clear, well-documented technical reports.
Required Qualifications
· At least 5 years of experience of hands-on experience in hardware or embedded system security, covering both physical and logical attack surfaces.
· Proven experience performing firmware extraction and analysis (memory dumping, patching, and reconstruction).
· Experience with side-channel analysis and/or fault injection (voltage glitching, EMFI, laser, etc.), and commercial platforms, such as ChipWhisperer or/and Riscure Inspector.
· Strong understanding of applied cryptography, secure protocol design, and embedded crypto implementations.
· Experience with embedded systems (ARM Cortex-M, RISC-V, STM32, etc.) and debugging interfaces (JTAG, SWD, UART, SPI).
· Advanced programming skills in Python, C, and assembly for hardware interfacing and comfortable working in Linux environments with build systems, cross-compilation, and version control (git).
· Solid knowledge of lab instrumentation: oscilloscopes, logic analyzers, pulse generators, etc, as well as reverse engineering tools and techniques (Ghidra, IDA Pro, Binary Ninja, radare2, ARM/RISC-V disassembly).