Senior Engineer - Penetration Testing (Fully Remote)

Finite State; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote-first culture

Security for critical infrastructure

Conference opportunities

Job summary

Finite State, a remote-first security company, is seeking an experienced security engineer to conduct hands-on assessments of IoT, embedded, ICS/OT, and automotive platforms. You will own engagements from scoping to reporting, leveraging our firmware analysis platform to drive findings.

Candidates should have 7+ years in relevant fields, strong hardware/firmware skills, and proficiency in Ghidra, Binary Ninja, JTAG/SWD, SPI/I2C/UART, and Python/Bash.

Qualifications

• 7+ years of experience in IoT, embedded, ICS/OT, or automotive security, with strong hardware and firmware skills.
• Proficiency in Ghidra/Binary Ninja, JTAG/SWD, SPI/I2C/UART, and Python/Bash scripting.
• Excellent communication skills and ability to present findings to technical and executive audiences.

Responsibilities

• Conduct hands-on security assessments of connected devices, embedded systems, and industrial/automotive platforms.
• Own engagements autonomously, from scoping to reporting, with support from Finite State's firmware analysis platform.

Skills

IoT security

Embedded security

ICS/OT security

Automotive security

Hardware security

Firmware analysis

Tools

Ghidra

Binary Ninja

JTAG

SWD

SPI/I2C/UART

Python

Bash

Job description

• Conduct hands-on security assessments of connected devices, embedded systems, and industrial/automotive platforms.
• Own engagements autonomously, from scoping to reporting, with support from Finite State's firmware analysis platform.

What You'll Need:

• 7+ years of experience in IoT, embedded, ICS/OT, or automotive security, with strong hardware and firmware skills.
• Proficiency in Ghidra/Binary Ninja, JTAG/SWD, SPI/I2C/UART, and Python/Bash scripting.
• Excellent communication skills and ability to present findings to technical and executive audiences.

Why Join:

• Be part of a fast-growing, fully distributed series-B company with a remote-first culture.
• Work on challenging security problems that protect critical infrastructure and connected products.
• Opportunity to contribute to product, research, and industry conferences.

Finite State

Finite State provides product security teams with a platform to detect vulnerabilities and manage software supply chain risks across connected devices and embedded systems. They are a fast-growing, fully distributed series-B company with a mission-driven, remote-first culture.