Penetration Testing Engineer

Due to new project ramp-up for leading EU-based OEM in area of Android Automotive IVI, Intellias is looking for a skilled Penetration Testing Engineer to ensure the security of wireless in-car services, focusing on Android-based systems. The ideal candidate will have strong expertise in wireless communication protocols (Bluetooth, WLAN), mobile application security, embedded systems, and penetration testing methodologies.

This project is dedicated to enhancing Wireless In-Car Services through the development, integration, and support of Android-based applications and platform components, with a strong focus on Bluetooth and WLAN stack functionalities. The scope includes both application-level and platform-level development, as well as platform architecture design to ensure a robust and scalable wireless service infrastructure.

Requirements:

• Penetration Testing & Security
• Hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Wireshark, Nmap, Frida, or custom scripts.
• Proficient in manual and automated testing techniques, including fuzzing and exploit development.
• Strong understanding of OWASP Mobile Top 10, CVSS, and common vulnerability types (buffer overflows, injection, etc.).
• Wireless Communication Protocols
• Deep knowledge of Bluetooth (Classic and BLE) and WLAN (802.11) protocols.
• Experience analyzing or exploiting vulnerabilities in Bluetooth or Wi-Fi stacks.
• Android Platform
• Familiarity with Android architecture, Android security model, and AOSP.
• Ability to reverse engineer APKs (using tools like JADX, apktool, etc.).
• Experience with SELinux, secure boot, and Android hardening techniques.
• Programming/Scripting
• Experience writing custom scripts/tools for security testing.

Responsibilities:

• Conduct penetration testing and security assessments on Android-based in-car systems, applications, and wireless communication stacks (Bluetooth, WLAN).
• Analyze and exploit vulnerabilities at the application, OS, and wireless stack levels.
• Reverse engineer Android applications and platform components to identify security flaws.
• Develop threat models and perform risk assessments for new wireless features or architecture changes.
• Collaborate with development teams to design and implement secure platform architecture and countermeasures.
• Document findings clearly, and provide mitigation strategies and remediation guidance.
• Contribute to the continuous improvement of security testing tools, techniques, and processes.

Why this position:

• Posibility to work with edge-cuting technologies for TOP OEM new platform