About IOActive:IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.Who you are:Our Embedded Device Security consultants maintain a high level of expertise regarding threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography. Intellectual curiosity, the ability to navigate ambiguous environments and a bias to action are critical competencies required for success.What you'll do:Perform high-end security evaluations and research for our clients, focused on a range of embedded devicesWork with other team members to deliver high-quality results to IOActive’s clients throughout the worldInvestigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test resultsDevelop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded productsCreate tools to assist in project goalsCommunicate complex vulnerabilities to both technical and non-technical client staffPerform research on new attack vectors, discover new vulnerabilities, create new exploitation techniquesEvangelize IOActive Labs through blogs, white papers, presentations, etc.Support business development efforts through the scoping of engagementsWhat you bring:Required Technical SkillsRapid identification of attack surfaces and entry points using implicit threat modeling techniquesAbility to connect and use JTAG/on-chip DebuggersLow-level C code reviewFreeRTOS, Android, Linux kernel drivers, protocol parsingSandbox policy review: SELinux/SE Android, seccomp, Linux name spaces, Minijail/FirejailCrypto implementation code reviews, specifically for secure boot and code signingJava, especially Android app sideARM 32- and 64-bit assemblyExtensive Git/GitHub experienceWi-Fi/BluetoothReverse engineering, specifically firmwareHardware/embedded system hackingVulnerability assessment and penetration testingKnowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage Consulting Skills + ExperienceAbility to work independently under deadlineRigorous attention to detail and strong analytic skillsAbility to write test plans based upon initial impressions and discussions with the teamComfortable navigating large codebases with minimal guidanceExcellent command of written and spoken EnglishComfortable working as part of a multinational and multidisciplinary teamLogical and structured approach to projects3-5 years or more of relevant work experience in a high-paced, enterprise consulting environmentSalary Range & BenefitsThe salary range for this position is $80-120k annuallyUSA benefits package includes PTO, Holiday, Medical, Dental, Vision, 401(k) match, Long and Short Term Disability, Life Insurance, and Employee Assistance Program (EAP), and Business Travel InsuranceWhat We OfferA chance to work with an industry leader in cyber securityAccess to world-class technical teams and researchA high-energy, collaborative team that values innovationFlexibility—work remotely or from the office as neededOpportunities for travelCompetitive compensation and performance-based incentivesWe have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.
17 days ago