PCI PTS Security Evaluator

In this role you help ensure payment terminals and secure hardware meet global security standards. You will work within an international team to evaluate hardware and software security, driving assurance for PCI PTS compliance. You will tackle hardware penetration testing, tamper-resistance evaluation, and logic security work that shapes robust, trusted devices. This is a chance to contribute to cutting-edge assessments and tooling in a knowledge-driven lab.

• Analyse payment terminal architectures, security modules, and embedded systems
• Perform hands-on hardware penetration testing (side-channel analysis, invasive and semi-invasive attacks, circuit-level probing)
• Conduct logical security testing (secure boot validation, key management verification, firmware inspection, protocol testing)
• Perform firmware code reviews for secure coding practices and cryptographic implementations
• Use laboratory equipment (oscilloscopes, power analysis setups) and basic tools
• Document attack paths, assess exploit feasibility, and ensure PCI PTS compliance
• Contribute to internal R&D by researching new attack vectors and developing tooling and methodologies

• Technical degree in relevant fields or equivalent practical experience in hardware/embedded security
• Experience or strong interest in hardware security techniques (board-level probing and debugging)
• Familiarity with logical security testing, secure firmware design, cryptographic implementations, and secure boot chains
• Knowledge of cryptographic protocols, authentication mechanisms, tamper protections, and attack countermeasures
• Willingness to learn rapidly in a continuously evolving field

• Independent and collaborative work style
• Persistent, creative, and resourceful in challenging testing scenarios
• Curious about latest research, standards, and attack techniques
• Hardware security techniques (board-level probing using JTAG, SWD, UART)
• Hardware penetration testing including side-channel analysis and invasive/semi-invasive attacks
• Logical security testing and secure firmware design