Vivid Resourcing
Our client, an innovative UAV and aerospace technology company, is looking for a Freelance Cyber Security & Penetration Testing Engineer to support the security assurance of next-generation airborne platforms.
This role will focus on ensuring the cybersecurity and airworthiness compliance of complex drone systems, working across embedded hardware, communications interfaces, software platforms and ground control infrastructure. The successful consultant will be responsible for identifying security vulnerabilities, assessing cyber risks and supporting certification activities in accordance with aerospace cybersecurity standards.
You will work closely with systems, software and hardware engineering teams to evaluate secure architectures, perform penetration testing activities and contribute to the development of secure-by-design airborne systems.
Key Responsibilities
- Perform penetration testing and vulnerability assessments on UAV and aerospace platforms.
- Support cybersecurity certification and compliance activities in line with DO-326A / ED-202A and related aviation cybersecurity frameworks.
- Conduct threat modelling and security risk assessments for airborne systems.
- Assess security of embedded Linux and NVIDIA-based computing platforms.
- Evaluate high-speed communication interfaces and data links for potential vulnerabilities.
- Support secure architecture design across airborne, ground control and communications systems.
- Review software and hardware designs from a cybersecurity perspective.
- Analyse attack surfaces across network, wireless and embedded environments.
- Work alongside software, systems and avionics engineers to implement security mitigations.
- Produce cybersecurity documentation, reports and compliance evidence for certification purposes.
Required Skills & Experience
- Strong experience in cybersecurity engineering and penetration testing.
- Previous experience within aerospace, aviation, defence or UAV environments.
- Understanding of DO-326A / ED-202A aerospace cybersecurity requirements.
- Knowledge of airworthiness and certification processes for safety-critical systems.
- Experience conducting threat analysis and risk assessments.
- Hands-on experience with embedded systems security.
- Experience assessing network, application and firmware vulnerabilities.
- Understanding of secure software development practices.
- Familiarity with Linux-based platforms and environments.
Desirable Experience
- Experience securing NVIDIA Jetson platforms or NVIDIA-based embedded computing systems.
- Knowledge of high-speed interfaces such as PCIe, Ethernet, CAN-FD, USB 3.0, MIPI, SerDes or other high-bandwidth communications technologies.
- Experience within drone, autonomous systems or robotics environments.
- Knowledge of aviation standards including DO-356A, ARP4754A and DO-178C.
- Experience with radio communications, datalinks and wireless security.
- Offensive security certifications such as OSCP, CREST or equivalent.
Contract Details
- Freelance Contract
- Remote/Hybrid Germany
- Aerospace & UAV Sector
- Long-term project potential
- Competitive daily rate