Security Consultant – Hardware Specialist

K2 Integrity; United States; Remote; USD 90,000 - 140,000; Full time

Job summary

K2 Integrity's Leviathan Security Group is seeking bright, independent professionals for a remote security testing role in the United States. You will tackle network, web, and hardware security challenges, perform threat modeling, code reviews, and deliver actionable findings to customers.

Ideal candidates have 2–4+ years in security, hands-on firmware or hardware experience, and proficiency in languages like Python, Java, C, or C#.

Qualifications

• A technical degree is ideal, although not required.
• In-depth hardware analysis knowledge with proficiency in at least two areas: network pentesting, app pentesting, cloud security assessment, or code review.
• 2–4+ years of experience in the security industry.
• Familiarity with hardware debug interfaces (e.g., JTAG, SWD).
• Firmware or binary analysis on ARM, x86/x64, MIPS, RISC-V, PowerPC, or Xtensa; additional embedded architectures are a plus.
• Knowledge of secure boot, TEE, SMM, measured boot, TPM-based attestation, hardware root of trust, anti-rollback, and fuse/debug port lockdown.
• Hands-on development in firmware, software, or hardware.
• Strong written and verbal communication skills.
• Network/web protocol knowledge (TCP/IP, UDP, IPsec, HTTP/HTTPS) with BURP, Nmap, netcat usage.

Responsibilities

• Threat modeling.
• Code review.
• Penetration testing.
• Technical writing.
• Interfacing with customers occasionally.

Skills

Python

Java

C

C++

C#

Networking

Written & verbal communication

Education

Technical degree (ideal)

Tools

BURP

Nmap

netcat

Job description

We are looking for bright and independent individuals to join our Leviathan Security Group practice area. Our company continues to pave the way in the security industry through our philosophy and work ethic. We are seeking someone with a passion for rapidly learning new technologies and identifying deviations from industry standard security practices. Much of the work we do is network and web and mobile application penetration testing. However, we often receive work that represents some of the most unique and novel technologies on the market, ranging from IoT devices to proprietary network protocols.
While your primary background is in software and security, you are passionate about holistic security and understanding the fundamental problems that our customers face.
This is a remote role in the USA.

Job Responsibilities:

Your responsibilities include threat modeling, code review, penetration testing, technical writing, and interfacing with customers from time to time.

Job Qualifications:

• A technical degree is ideal, although not required.
• In-depth and applied knowledge of hardware analysis, along with working proficiency in at least 2 of the following: network penetration testing, application penetration testing, cloud security assessment, code review.
• 2-4+ years of experience in the security industry.
• Familiarity with hardware debug interfaces (e.g., JTAG, SWD).
• Experience performing firmware or binary analysis on at least one of the following architectures: ARM (AArch64 and Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures (8051, AVR, ARC, TriCore, etc) is a plus.
• Familiarity with common firmware and platform security mechanisms such as secure boot, Trusted Execution Environments, System Management Mode, measured boot and TPM-based attestation, hardware root of trust, secure update with anti-rollback, and fuse or debug port lockdown.
• Hands-on development experience in one or more of firmware, software, or hardware: you have written embedded firmware, built software applications, or worked with hardware designs and schematics, and understand the security fundamentals.
• Successful track record of delivering quality results in complex projects – you will assess a variety of technologies, often requiring quite a bit of ramp.
• Python, Java, C, C++, or C# experience – having a deep level of knowledge of one or more of these languages will be beneficial to understanding new technologies.
• Strong written and verbal communication skills – you will be documenting your practices, observations, and recommendations.
• Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) – you will be leveraging industry standard tools such as BURP, Nmap, netcat, and others to perform network analysis.