DebianFox User
@debianfoxuser
I find and remediate embedded firmware and hardware vulnerabilities.
What I'm looking for
I've audited embedded devices and firmware at NEK TEKH, securing three product lines responsible for about 1.5 million units shipped in 2025. I identified nine critical and high-severity issues, remediated all of them within a week, and co-designed signed, encrypted firmware updates.
Across five-plus years as an independent contractor, I've delivered 10+ embedded security and reverse-engineering projects. My work includes analysing industrial controller firmware, building proof-of-concept exploits, and creating a 10 ns STM32F4 pulse generator for fault-injection research.
At INFORION, I analysed binaries and firmware across ARM64, MIPS, and x86, found three vulnerabilities, and developed a working PoC exploit for each. I also helped recover a project frozen for more than a year and delivered my part six months ahead of deadline.
I work hands-on across firmware, hardware, protocols, and cryptography—from IDA Pro and Ghidra to side-channel analysis, JTAG/SWD, secure boot, smart cards, and secure update design.
Experience
Work history, roles, and key accomplishments
Software Engineer — Embedded Security
NEK TEKH
Aug 2025 - Present (1 year)
Conducted full security audits of 3 product lines, identifying and remediating 9 vulnerabilities. Co-designed signed and encrypted firmware update mechanisms and hardened product lines accounting for ~70% of manufacturer output.
Reverse Engineer, Embedded Software Engineer
Self-employed / Independent contractor
Jan 2021 - Present (5 years 7 months)
Delivered 10+ client projects in embedded systems security research and reverse engineering. Implemented cryptographic protection systems, built fault injection tools, and conducted side-channel attacks on STM32 families.
Software Engineer — Vulnerability Research
INFORION
Oct 2023 - Jul 2024 (9 months)
Performed reverse engineering across ARM64, MIPS, and x86 architectures, discovering 3 vulnerabilities and developing PoC exploits. Proposed alternative technical approach that cut implementation time by 50%.
Education
Degrees, certifications, and relevant coursework
DebianFox hasn't added their education
Don't worry, there are 90k+ talented remote workers on Himalayas
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Job categories
Skills
Interested in hiring DebianFox?
You can contact DebianFox and 90k+ other talented remote workers on Himalayas.
Message DebianFoxGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
