Senior Embedded Security Researcher (Remote)

Red Balloon Security, Inc.; United States; Remote; USD 150,000 - 225,000; Full time

Benefits offered by this job

Discretionary bonuses

Equity

401k

Health plan

Flexible vacation

Job summary

Red Balloon Security, Inc. is a leading embedded security provider focused on securing firmware and hardware across critical industries. The role centers on researching vulnerabilities, reverse engineering, and building defenses for embedded devices.

You will work with OFRAK, Ghidra, IDA, and modern tooling in a hands-on lab environment in NYC or remotely within the United States. Ideal candidates have 5+ years in security research, strong C/C++ and Python skills, and proven experience with

Qualifications

• BA/BS in computer science, computer or electrical engineering or a related major.
• 5+ years of experience in security research.
• Proficiency in hardware and software reverse engineering.
• Familiarity with fuzzing, static analysis, and reverse engineering.
• Experience with low-level software design and implementation.
• Understanding of modern software design and engineering practices.
• Proficiency in C/C++ and Python.
• Knowledge of AI tooling and frontier models.
• Ability to work effectively in a hands-on research and lab environment.
• Strong self-initiative and self-motivation.
• Experience with RE tools such as Ghidra, IDA, Binary Ninja, OFRAK.
• Experience with virtual environments, Docker containers, and ZeroTier.
• Knowledge of FPGA, CPLD, VHDL, Verilog, state machine analysis.

Responsibilities

• Research security vulnerabilities to protect embedded devices from firmware, hardware, and platform-level threats.
• Design and implement host-based defense software for black-box embedded devices.
• Analyze firmware images, boot chains, update mechanisms, device interfaces, and embedded operating systems.
• Design and implement automated HW / SW testing infrastructure.
• Conduct offensive and defensive research on embedded HW / SW.
• Contribute to the OFRAK (Open Firmware Reverse Analysis Konsole) framework.
• Perform HW / SW reverse engineering on embedded devices.
• Automate vulnerability identification for embedded software.
• Use AI tooling, agents, MCP servers, and test harnesses to accelerate security research and vulnerability analysis.

Skills

C/C++

Python

Reverse engineering

Fuzzing

Static analysis

OS design

AI tooling

Lab research

Self-motivation

Verilog

VHDL

Ghidra

IDA Pro

Binary Ninja

OFRAK

Docker

Virtual machines

UART

JTAG

I2C

PCIe

Verilog

VHDL

Lab OS design

Education

BA/BS in Computer Science or Electrical Engineering

MA/MS/PhD in Computer Science or related field

Tools

Ghidra

IDA Pro

Binary Ninja

OFRAK

Docker

Virtual Machines

ZeroTier

Job description

Red Balloon Security, Inc. is a leading embedded security provider focused on securing firmware and hardware across critical industries. The role centers on researching vulnerabilities, reverse engineering, and building defenses for embedded devices.

You will work with OFRAK, Ghidra, IDA, and modern tooling in a hands-on lab environment in NYC or remotely within the United States. Ideal candidates have 5+ years in security research, strong C/C++ and Python skills, and proven experience with