Product Security Testing and Reporting

• Perform product security testing and reporting, including but not limited to:
• Black box reverse engineering of hardware and firmware
• Vulnerability research
• Exploit development
• Fuzz testing
• Protocol reverse engineering

Penetration Testing

• Conduct manual penetration testing, including but not limited to:
• Mobile Applications (iOS & Android)
• Web Applications
• Cloud Infrastructure
• Network Systems

Threat Modeling and Collaboration

• Facilitate threat modeling with Copeland application, infrastructure, and product teams.

Security Training and Outreach

• Perform security training and outreach to internal development teams.

ICS / OT and Manufacturing Security

• Perform security analysis & evaluation of ICS/OT environments related to product manufacturing.

Supply Chain Security

• Perform security analysis & evaluation of both hardware and software supply chains.

Documentation and Metrics

• Maintain documentation and metrics for the product security program’s services.