Principal Penetration Tester, Embedded Devices

Omada Network S; Irvine (CA); Presencial; USD 220.000 - 230.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully paid medical, dental, and vision

401k and PTO

Relocation assistance

Descripción de la vacante

TP-Link Systems Inc. in Irvine, CA, is seeking a Principal Penetration Tester for Embedded Devices to define and lead offensive security strategy across embedded product lines.

This individual-contributor role requires deep hands-on testing, vulnerability research, and collaboration with engineering and executive stakeholders. You will prototype security tooling, mentor teams, influence product design, and drive certification readiness, with a salary range of $220,000–$230,000 and full benefits.

Formación

• Bachelor's degree in computer science, computer engineering, information security, or related field.
• 8+ years in embedded-device security, penetration testing, vulnerability research, or related discipline.
• Expert knowledge of embedded architectures, firmware, secure boot, hardware security, and cryptography.
• Hands-on experience with security tools and exploitation techniques.
• Ability to influence architecture and engineering decisions and communicate risk to executives.

Responsabilidades

• Define and execute strategy for penetration testing of embedded devices and related ecosystems.
• Lead complex, high-risk assessments across product lines (hardware, firmware, OS, crypto, protocols).
• Conduct vulnerability research, develop proof-of-concept exploits, and analyze root causes.
• Mentor engineers and drive secure design decisions and testing frameworks.
• Develop security tooling and automation to improve coverage and repeatability.

Conocimientos

Embedded-security

Penetration testing

Reverse engineering

Programming (C/C++, Python, Bash, PS)

Mentoring

Communication to executives

Educación

Bachelor's degree in CS/CE/IS

Herramientas

Burp Suite

Nmap

Kali Linux

Nessus

Metasploit

IDA Pro

Ghidra

JTAG/SWD

Descripción del empleo

Principal Penetration Tester, Embedded Devices### Principal Penetration Tester, Embedded DevicesApply: On-Site: Irvine, California: Full time: Posted Yesterday: R26\\_0000000147# **Description** ***About Us***Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link serves customers in over 170 countries and continues to grow its global footprint. We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology. Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle. **Overview:** **TP-Link Systems Inc.** is seeking a highly accomplished **Principal Penetration Tester, Embedded Devices** to define and lead the technical strategy for offensive security across our embedded product portfolio. This individual-contributor leadership role will establish advanced testing methodologies, direct complex assessments of IoT ecosystems, and influence product architecture and security priorities across multiple business and engineering teams. The Principal Penetration Tester will serve as a trusted technical authority for vulnerability research, exploit development, threat modeling, coordinated vulnerability response, and security validation throughout the product lifecycle.The ideal candidate combines exceptional hands-on expertise in embedded systems security with the strategic judgment to identify systemic risk, establish reusable testing capabilities, mentor senior engineers, and communicate material findings to engineering and executive stakeholders. This role is expected to raise the maturity of TP-Link’s offensive security program and help ensure that products meet evolving global cybersecurity standards and regulatory expectations. **Key Responsibilities:*** Offensive Security Strategy: Define and execute the enterprise technical strategy, roadmap, and standards for penetration testing of embedded devices, mobile applications, cloud services, APIs, wireless interfaces, and complete IoT ecosystems.* Advanced Assessments: Lead the most complex, high-risk penetration tests and architecture-level security assessments across multiple product lines, including hardware, firmware, boot chains, operating systems, cryptographic implementations, protocols, and supporting services.* Vulnerability Research and Exploit Development: Conduct original research, develop proof-of-concept exploits, analyze root causes, and identify systemic vulnerability patterns that may affect multiple products or platforms.* Threat Modeling and Design Influence: Establish scalable threat-modeling practices and advise product architects and engineering leaders on secure design decisions, compensating controls, and risk acceptance.* Security Tooling and Automation: Architect and develop custom security tools, fuzzing harnesses, firmware-analysis pipelines, exploit frameworks, and automated testing platforms that expand coverage and improve repeatability.* Product Security Integration: Drive the integration of offensive security requirements and validation gates throughout the secure product development lifecycle, including design reviews, pre-release testing, and post-release assurance.* Incident and Vulnerability Response: Provide senior technical leadership for critical product-security incidents and coordinated vulnerability disclosure, including severity assessment, exploitation analysis, remediation validation, and lessons learned.* Certification and Regulatory Readiness: Serve as a technical authority for product cybersecurity certifications, standards, and regulatory assessments, including NIST, ETSI EN 303 645, SOG-IS, and other applicable global requirements.* Technical Leadership and Mentorship: Mentor penetration testers and product-security engineers, establish review standards, lead technical communities of practice, and elevate offensive-security capabilities across R&D and QA organizations.* Executive and Cross-Functional Communication: Translate complex technical findings into clear business risk, remediation priorities, and strategic recommendations for product, engineering, legal, compliance, and executive stakeholders. **Qualifications:**· * Bachelor's degree in computer science, Computer Engineering, Electrical Engineering, Information Security, or a related field, or equivalent practical experience.* 8 or more years of progressive experience in embedded-device security, penetration testing, vulnerability research, exploit development, or a closely related discipline, including demonstrated technical leadership across complex programs* Expert-level knowledge of embedded architectures, firmware, operating systems, secure boot, hardware security mechanisms, protocol security, cryptography, wireless technologies, and common vulnerability classes.* Extensive hands-on experience with tools such as Burp Suite, Nmap, Kali Linux, Nessus, Metasploit, IDA Pro, Ghidra, JTAG/SWD interfaces, logic analyzers, debuggers, and hardware or firmware extraction techniques, including the ability to extend or customize tooling.* Demonstrated ability to design advanced penetration-testing methodologies, fuzzing strategies, automated security-testing platforms, and repeatable assessment frameworks for diverse product families.* Expertise in reverse engineering, binary analysis, exploit development, and vulnerability discovery across hardware, firmware, applications, network services, cloud components, and mobile ecosystems.· Advanced programming and scripting skills in languages such as C/C++, Python, Bash, and PowerShell, with the ability to produce high-quality security tools, automation, and proof-of-concept exploit code.* Proven ability to influence architecture and engineering decisions without direct authority, lead technical reviews, mentor experienced engineers, and communicate risk to both technical and executive audiences.* Relevant advanced certifications such as OSCP, OSEP, OSWE, GXPN, GREM, CISSP, or comparable demonstrated expertise are preferred. Publicly credited CVEs, security research, conference presentations, patents, or significant open-source contributions are highly valued. **Soft Skills:*** Recognized technical leadership and a strong record of mentoring senior and developing engineers.* Exceptional written and verbal communication, including the ability to present complex risk and remediation recommendations to executive and engineering audiences.* Strategic thinking, sound judgment, and the ability to prioritize systemic risk across multiple products and concurrent initiatives.* High ownership, intellectual curiosity, and the ability to operate independently while building alignment across product, R&D, QA, legal, compliance, and business teams.# Benefits***Salary Range:***$220,000-$230,000***Benefits:**** Fully paid medical, dental, and vision insurance (partial coverage for dependents)* Contributions to 401k funds* Over four weeks of PTO per year* Bi-annual pay increases* Health and wellness benefits, including free gym membership* Quarterly team-building eventsAt TP-Link Systems Inc., we are continually searching for ambitious individuals who are passionate about their work. We believe that diversity fuels innovation, collaboration, and drives our entrepreneurial spirit. As a global company, we highly value diverse perspectives and are committed to cultivating an environment where all voices are heard, respected, and valued. We are dedicated to providing equal employment opportunities to all employees and applicants, and we prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Beyond compliance, we strive to create a supportive and growth-oriented workplace for everyone. If you share our passion and connection to this mission, we welcome you to apply and join us in building a vibrant and inclusive team at TP-Link Systems Inc.*Please, no third-party agency inquiries, and we are unable to offer visa sponsorships at this time.*