Embedded Device Security Specialist — Global Research

IOActive, Inc.; Cheltenham; In loco; GBP 70.000 - 110.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive compensation

Travel opportunities

Industry-leading team

Descrizione del lavoro

IOActive, Inc. is seeking an Embedded Device Security consultant to join our Cheltenham security lab. You will perform high-end evaluations on embedded devices, develop sophisticated attack methods, and communicate findings to clients globally.

The role requires expert knowledge of C/Java, assembly, cryptography, and open platforms, with a focus on real-world security impact and collaboration across a multinational team.

Competenze

• Expertise in embedded security across devices and platforms.
• Strong ability to identify attack surfaces and risk areas.

Mansioni

• Perform high-end security evaluations and research for embedded devices.
• Collaborate with team to deliver high-quality results to IOActive’s clients worldwide.
• Investigate logical attack scenarios from code review findings and test results.
• Develop state-of-the-art exploits for embedded products.
• Create tools to support project goals.
• Communicate complex vulnerabilities to technical and non-technical client staff.
• Research new attack vectors and vulnerabilities; craft exploitation techniques.
• Promote IOActive Labs through blogs, white papers, and presentations.
• Support business development through scoping engagements.

Conoscenze

C programming

Java/Android

Assembly language

Embedded systems security

Threat modeling

Code review

Vulnerability assessment

Penetration testing

Cryptography & secure boot

English communication

Strumenti

JTAG debugging

Git/GitHub

Minijail/Firejail

SELinux

Android/Linux drivers

Descrizione del lavoro

IOActive, Inc. is seeking an Embedded Device Security consultant to join our Cheltenham security lab. You will perform high-end evaluations on embedded devices, develop sophisticated attack methods, and communicate findings to clients globally.

The role requires expert knowledge of C/Java, assembly, cryptography, and open platforms, with a focus on real-world security impact and collaboration across a multinational team.