Automotive Cybersecurity Test Engineer (Full Benefits Package

Akkodis is seeking a full-time, highly-skilled Automotive Cybersecurity Test Engineer to join our dedicated and elite cybersecurity team in the Detroit Metro area. As the automotive industry rapidly transitions toward software-defined vehicles, ensuring the security of complex vehicular networks has never been more critical.

Candidate must have experience with automotive ECU’s and Penetration Testing while being familiar with Protocol Fuzzing (no source code fuzzing).

In this role, you will be at the forefront of offensive security, acting as the ultimate stress-test for the next generation of connected and autonomous vehicles. You'll dive deep into the architecture of modern vehicles, conducting rigorous security assessments, penetration testing, and vulnerability research on mission-critical automotive embedded systems. Your primary targets will range from traditional Electronic Control Units (ECUs) to next-generation high-performance vehicle computers, gateways, and digital instrument clusters.

By identifying zero-day vulnerabilities and architectural flaws before they can be exploited in the wild, you will play a direct role in safeguarding the future of mobility.

Starting Pay Range:
Up to $145,000/yr (pay commensurate based on experience and education levels).

• Design & Execute Campaigns:
  Build and execute comprehensive penetration testing campaigns against a wide variety of automotive embedded targets.
• Advanced Fuzzing:
  Configure and deploy targeted fuzzing frameworks (e.g., AFL++, lib Fuzzer, Peach, Defensics) against vehicle computers, ECUs, and clusters.
• Vulnerability Discovery:
  Uncover memory corruption vulnerabilities (buffer overflows, use-after-free), resource exhaustion, and complex logic flaws that automated static analyzers often miss.

• Wired Vehicle Networks:
  Intercept, manipulate, and inject traffic across internal wired topologies, including CAN, CAN-FD, Automotive Ethernet (SOME/IP, DoIP), LIN, and Flex Ray. You will utilize industry-standard tools like Vector CANoe/CANalyzer and Vehicle Spy.
• Wireless Ecosystems:
  Aggressively analyze and exploit vulnerabilities across every wireless communication interface. This includes deep-dive assessments of Bluetooth/BLE, Wi-Fi (802.11), Cellular networks (4G/LTE, 5G, and C-V2X), UWB, NFC, and traditional RF/Keyless Entry Systems (RKE/PEPS) using Software Defined Radios (SDRs like HackRF, USRP).

• Physical Attack Vectors:
  Conduct hands-on, hardware-level security testing to identify physical attack vectors.
• Hardware Debugging & Exploitation:
  Utilize tools like Logic Analyzers, Bus Pirate, J-Link, and UART/JTAG/SPI debuggers, side-channel analysis (SCA), and voltage/clock fault injection techniques.
• Firmware Analysis:
  Extract firmware from flash memory for subsequent reverse engineering and static analysis using disassemblers like IDA Pro.

• Develop and apply AI-driven fuzzing techniques, using machine learning to intelligently guide test case generation and uncover complex vulnerabilities in vehicle software.
• Utilize ML models to perform automated analysis of source code and binaries, identifying potential zero-day vulnerabilities that evade traditional static and dynamic analysis tools.

• Implement and manage machine learning systems to analyze real-time data from CAN, Automotive Ethernet, and wireless channels, automatically detecting anomalous patterns indicative of a cyberattack.

• Conduct security assessments of on-board AI/ML systems (e.g., those used for perception, sensor fusion, or decision-making in autonomous driving).
• Design and execute adversarial attacks (e.g., data poisoning, evasion attacks) to test the resilience and integrity of automotive AI models.

• Actionable Reporting:
  Document findings in meticulous, highly technical reports that include mitigation strategies.
• Engineering
  
  Collaborat…