Senior IoT Security Engineer – Offensive Security Lead

Alarm.com; Tysons (VA); On-site; USD 168,000 - 181,000; Full time

Benefits offered by this job

Health insurance

401(k) with employer match

Paid vacation

Office 4 days a week

Job summary

Alarm.com is seeking a Staff Security Engineer to identify security risks in our IoT device ecosystem, communicate findings to management, and assist with mitigation. The role requires hands-on reverse engineering, networking, OS, and programming experience, with duties spanning testing, threat modeling, and policy documentation.

The position involves collaboration with infrastructure, product, and other teams to minimize security and privacy risks, and includes a robust rewards package.

Qualifications

• 10+ years of information security experience with a focus on offensive security or vulnerability research.
• Experience security testing in IoT, embedded, or firmware environments.
• Working knowledge of embedded Linux systems and firmware analysis.
• Experience with hardware debugging tools such as oscilloscopes and logic analyzers.
• Strong communication and collaboration skills.

Responsibilities

• Perform IoT penetration testing, including firmware extraction, reverse engineering, and vulnerability discovery.
• Conduct security research, threat modeling, vulnerability assessments, penetration testing across applications and systems.
• Use manual and automated techniques to assess risks and bypass security mechanisms.
• Oversee deployment and modernization of security solutions in IoT infrastructure and documents.
• Select and enhance security solutions to improve overall IoT security.
• Document risk impacts clearly in reports and remediation plans.
• Triage and remediate issues reported by external parties; collaborate with stakeholders.
• Other duties as assigned.

Skills

IoT security

Reverse engineering

Penetration testing

Vulnerability research

Networking

Embedded systems

Programming

Communication

Education

B.A. or B.S. in Computer Science or Electrical Engineering

Tools

IDA Pro

Ghidra

Binary Ninja

Oscilloscope

Logic analyzer

UART/I2C/SPI/JTAG tooling

Job description

Alarm.com is seeking a Staff Security Engineer to identify security risks in our IoT device ecosystem, communicate findings to management, and assist with mitigation. The role requires hands-on reverse engineering, networking, OS, and programming experience, with duties spanning testing, threat modeling, and policy documentation.

The position involves collaboration with infrastructure, product, and other teams to minimize security and privacy risks, and includes a robust rewards package.