The Embedded Device Security Consultant is responsible for performing high end security evaluations and research focusing on embedded devices, including automobiles, payment devices, mobile phones, medical devices, etc. The consultant will work with other team members to deliver high quality results to IOActive's clients around the world.The consultant is expected to maintain a high level of expertise regarding known threats and technical advances in embedded security and should be particularly experienced in areas such as C, Java, assembly languages, Open Platform, and EMV standards, and cryptography.Job ResponsibilitiesThe Embedded Device Security Consultant will undertake security evaluation tasks and duties in order to meet customer requirements and project deadlines. The tasks may include:Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test resultsDevelop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded productsCreate tools to assist in project goalsCommunicate complex vulnerabilities to both technical and non-technical client staffPerform research on new attack vectors, discover new vulnerabilities, create new exploitation techniquesEvangelize IOActive Labs through blogs, white papers, presentations, etc.Support business development efforts through the scoping of engagementsJob RequirementsTechnical SkillsAbility to connect and use JTAG/Onchip DebuggersSoldering skills to remove flash chips and solder on test leadsReverse Engineering, specifically FirmwareKnowledge of ARM and other embedded microprocessorsKnowledge of Linux and other embedded OSsProficient in at least one mainstream programming language (Java, .NET or C/C++)Hardware/embedded system hackingDevelopment experience in software on embedded productsReverse engineering and source code review experienceVulnerability assessment and penetration testing experienceKnowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage, etc.Knowledge of cryptography is desirableAbility to work independently under deadlineRigorous attention to detail and strong analytic skillsExcellent command of written and spoken EnglishComfortable working as part of a multi-national and multi-disciplinary teamLogical and structured approach to projectsFive years or more of relevant work experience in high-paced, enterprise environmentSecurity SkillsReverse engineering and source code review experienceVulnerability assessment and penetration testing experienceKnowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage, etc.Knowledge of cryptography is desirableSoft SkillsAbility to work independently under deadlineRigorous attention to detail and strong analytic skillsExcellent command of written and spoken EnglishComfortable working as part of a multi-national and multi-disciplinary teamLogical and structured approach to projectsAdditional ExperienceFive years or more of relevant work experience in high-paced, enterprise environment
Senior Security Consultant, Embedded Systems • Seattle, WA, United States
Cornerstone Building Brands, headquartered in Cary, North Carolina, is the largest manufacturer of external building products in North America with over $6 billion in annual revenue and an expansiv... Show more
A leading cloud technology firm is seeking a Senior Software Engineer to design, build, and maintain security products.In this remote role, you'll work in a dynamic environment handling high-volume... Show more
Arboreal Management is a mission-driven property management company focused on affordable and workforce housing in the Pacific Northwest.We’ve grown quickly to manage over 5,000 homes with integrit... Show more
Building Enclosure Consultant / Senior Project Manager.Intertek, a leading provider of quality and safety solutions to many of the world's top-recognized brands and companies, is actively seeking a... Show more
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.By taking a three-tiered, holistic approach for ... Show more
A leading cloud technology company is on the lookout for an Infrastructure Security Engineer.In this role, you will manage security projects, develop security tooling, and maintain robust systems f... Show more
At Snowflake, we are powering the era of the agentic enterprise.To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they ... Show more
Senior Director, Product Security.As the most trusted brand in our industry, Docusign recognizes the profound importance of maintaining and enhancing customer trust in our products.The Senior Direc... Show more
A leading financial services company seeks a Senior Managing Consultant to lead Security Solutions sales relationships across its largest merchant customers.You will drive revenue growth, develop s... Show more
Technical Program Lead, Infrastructure & Workplace Technology.The Technical Program Lead, Infrastructure & Workplace Technology is responsible for coordinating and driving the execution of enterpri... Show more
Analyze and document system and business requirements.Setup system and configure according to customer requirements.Develop test scripts and for customers testing phase.Train end users on the Intac... Show more
We are inviting speculative applications from across the US.This could be for both remote and onsite positions.When applying please be sure to include which of the following locations you'd be open... Show more
VP Of Enterprise Applications And Information Services.Join a team that shares your calling.At MultiCare, you're more than just a job title you're part of a team built on trust that cares for each... Show more
We are hiring a Senior Director of Build to lead the manufacturing and assembly of Helion's fusion generators and subscale plasma devices.You will mentor experienced leaders, create strategic plans... Show more
At Snowflake, we are powering the era of the agentic enterprise.To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they ... Show more
Software Security Engineering Manager, Secure Frameworks.San Francisco, CA | Seattle, WA.Anthropic's mission is to create reliable, interpretable, and steerable AI systems.We want AI to be safe and... Show more
A senior member of the service delivery team, the Senior Consultant is responsible for executing on projects with clients across a variety of industries and delivering transformational change and c... Show more
USA based corporation duly organized under the laws of the Commonwealth of Georgia.Software Development, Software Consultancy and Information Technology Enabled Services.At least 3 years of experie... Show more
