Senior Cyber Security Consultant

Pentangle Tech Services | P5 Group; Columbus (IN); On-site; USD 120,000 - 180,000; Full time

Job summary

Pentangle Tech Services | P5 Group is seeking an experienced security lead for embedded systems in Columbus, Indiana. The role focuses on designing secure architectures and performing threat modeling across hardware and software layers.

You will drive risk assessments, implement encryption and key management, and oversee security testing, RCA, and compliance with industry standards. This senior position requires deep expertise and hands-on leadership.

Qualifications

• 15+ years in Embedded Systems, 8+ years in Cyber Security focused on embedded security.
• Experience designing robust security architectures for embedded systems (hardware and software).
• Experience performing security risk assessments, vulnerability assessments and threat modeling for embedded systems.
• Identify threats (tampering, interception, access) and propose mitigations.
• Experience in security incidents RCA and design improvements.
• Encryption, secure boot, secure key management and access control on embedded devices.
• Protect against hardware/software attacks including side-channel, firmware tampering, reverse engineering.
• Conduct penetration testing, code reviews and fuzz testing to find and fix security vulnerabilities.
• Design systems to comply with standards (ISO 27001, IEC 62443, NIST 800-53, ISO 21434).
• Define architectures to maximize reuse within systems.

Skills

Embedded security

Threat modeling

Security architecture

Risk assessment

Vulnerability assessment

Encryption & key management

Secure boot

Hardware security modules (HSM)

Side-channel protection

Penetration testing

Tools

FMEA

Fuzz testing

Job description

• 15+ years’ of Experience in Embedded Systems and at least 8 years of Experience in Cyber Security, with a focus on embedded systems security
• Extensive experience in Designing and implementing robust security architectures for embedded systems, ensuring security by design for hardware and software.
• Extensive experience in Performing security risk assessments, vulnerability assessments, and threat modeling for embedded systems.
• Extensive experience in Identifying potential threats (e.g., physical tampering, data interception, unauthorized access) and recommend mitigation strategies
• Experience in Analyzing security breach incidences and performing RCA and FMEAs on the overall system and designs for those and come up with recommendations.
• Experience in Defining, Developing, and applying encryption and decryption methods, secure boot processes, secure key management, and access control mechanisms, HSM for embedded devices.
• Experience in designing protection against hardware and software attacks, including side-channel attacks, firmware tampering, and reverse engineering.
• Experience in Conducting penetration testing, code reviews, and fuzz testing to identify and fix security vulnerabilities in embedded systems and Developing security test plans to ensure compliance with security requirements and industry standards.
• Experience in designing systems to Ensure compliance with relevant cybersecurity standards and regulations for embedded systems (e.g., ISO 27001, IEC 62443, NIST 800-53, ISO 21434, R-156).
• Experience in Defining architectures for maximizing the reuse within systems