About this opportunity
IOActive, Inc. lists this Senior Embedded Security Consultant - US opportunity in seattle, Washington. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Senior Embedded Security Consultant - US
OUR MISSION UNITES US
"Making the world a safer and more secure place." "
It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.
About IOActive:
IOActive, a trusted partner for Global 1000 enterprises, provides research‑fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.
This is a hybrid position with time split between the security lab and Remote. Candidates located in the greater Seattle area will be given priority consideration.
Who you are:
SeniorEmbedded Device Security Consultantsareresponsible for performing high‑end security evaluations and research for our clientsfocusing on embedded devices. Thisincludesautomobiles, payment devices, mobile phones, and medical devices.The consultant will work with other team members to deliver high‑quality resultsto I O Active’s clients throughoutthe world.
Our consultantsmaintain a high level of expertise regarding known threats and technical advances in embedded security. This requires expert knowledge in areas such as C, Java and Assembly languages, Open Platform,EMV standards, and cryptography.
What you’ll do:
The Senior Embedded Device Security Consultant will undertake advanced level security evaluation tasks and duties in order to meet customer requirements and project deadlines. This includes:
Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results
Develop sophisticated, state‑of‑the‑art attacks that integrate the latest attack methods against embedded products
Create tools to assist in project goals
Communicate complex vulnerabilities to both technical and non‑technical client staff
Evangelize I O Active Labs through blogs, white papers, presentations, etc.
Support business development efforts through the scoping of engagements
What you bring:
Ability to connect and use JTAG/OnchipDebuggers
Soldering skills to remove flash chips and solder on test leads
Reverse Engineering, specifically Firmware
Knowledge of ARM and other embedded microprocessors
Knowledge of Linux and other embedded OSs
Proficient in at least one mainstream programming language (Java, Rust, .NET,CorC++)
Hardware/embedded system hacking
Development experience in software on embedded products
Reverse engineering and source code review experience
Vulnerability assessment and penetration testing experience
Knowledge of security‑related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage, etc.
Knowledge of cryptography is desirable
Ability to work independently under deadline
Rigorous attention to detail and strong analytic skills
Excellent command of written and spoken English
Comfortable working as part of a multi‑national and multi‑disciplinary team
Logical and structured approach to projects
Five years or more of relevant work experience in high‑paced, enterprise environment
Security Skills
Reverse engineering and source code review experience
Vulnerability assessment and penetration testing experience
Knowledge of security‑related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage, etc.
Knowledge of cryptography is desirable
Consulting Skills + Experience
Ability to work independently under deadline
Rigorous attention to detail and strong analytic skills
Excellent command of written and spoken English
Comfortable working as part of a multi‑national and multi‑disciplinary team
Logical and structured approach to project
5+years or more of relevant work experience in high‑paced, enterprise consulting environment
Salary Range & Benefits
The salary range for this position is $90-175k annually
USA benefits package includes PTO, Holiday, Medical, Dental, Vision, 401(k) match, Long and Short Term Disability, Life Insurance, and Employee Assistance Program (EAP), and Business Travel Insurance
What We Offer
A chance to work with an industry leader in cyber security
Access to world‑class technical teams and research
A high‑energy, collaborative team that values innovation
Flexibility—work remotely or from the office as needed
✈️ Opportunities for travel
Competitive compensation and performance‑based incentives
If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!
Why IOActive:
We have over 25 years of experience that’s established and stable; yet high‑growth with the energy, passion and dynamic work environment of a startup. We are renowned for ourinnovation and thought leadership within our high‑profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.
IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
#J-18808-Ljbffr
Worksite address
seattle, WA, 98127, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.