Hardware Security Researcher

RiffRaff Tech Solutions is seeking a highly experienced Hardware Security & NFC Specialist for an authorized security analysis and data access evaluation project. This role focuses on an NFC-based authentication system used in industrial packaging printers.

Role Overview:
The selected candidate will be responsible for analyzing NFC tags embedded in ink cartridges, evaluating the existing security architecture, and assisting in secure data extraction and system compatibility research under authorized conditions. The project specifically targets the deep technical analysis of the protection mechanisms and memory architecture of NFC tags that contain approximately 45 pages of structured memory data, with only the first 3 pages being directly readable, and the remaining pages protected by key-based access control.

Key Responsibilities:

• Analyze NFC tag types (e.g., MIFARE, NTAG, custom ISO14443).
• Identify the authentication scheme and key management structure.
• Perform authorized reverse engineering of protected memory blocks.
• Evaluate the encryption and authentication methods employed.
• Document the memory layout and data structure comprehensively.
• Propose secure cloning or migration strategies, where legally permissible.
• Deliver complete technical documentation for the project findings.

Required Skills & Experience:

• Strong experience with ISO14443 A/B, MIFARE Classic/DESFire, NTAG, and NFC secure elements.
• Proficiency with tools such as Proxmark3, NFC sniffing tools, and logic analyzers.
• Experience in embedded debugging.
• Knowledge of cryptography basics, key diversification, and secure authentication protocols.
• Demonstrated experience in hardware reverse engineering.
• Familiarity with firmware analysis is considered a plus.

Preferred Background:

• Previous roles as a Hardware Security Researcher, Embedded Systems Engineer, or RFID/NFC Firmware Engineer.
• Experience with printer authentication systems is advantageous.

Important Note:
This research will be conducted under strict authorization and in full compliance with all applicable laws. Candidates are expected to adhere to the highest ethical standards in security research.