Senior Security Researcher

Red Balloon Security, Inc.; United States; Remote; USD 150,000 - 225,000; Full time

Benefits offered by this job

Discretionary bonuses

Equity

401k

Health plan

Flexible vacation

Job summary

Red Balloon Security, Inc. is a leading embedded security provider focused on securing firmware and hardware across critical industries. The role centers on researching vulnerabilities, reverse engineering, and building defenses for embedded devices.

You will work with OFRAK, Ghidra, IDA, and modern tooling in a hands-on lab environment in NYC or remotely within the United States. Ideal candidates have 5+ years in security research, strong C/C++ and Python skills, and proven experience with

Qualifications

• BA/BS in computer science, computer or electrical engineering or a related major.
• 5+ years of experience in security research.
• Proficiency in hardware and software reverse engineering.
• Familiarity with fuzzing, static analysis, and reverse engineering.
• Experience with low-level software design and implementation.
• Understanding of modern software design and engineering practices.
• Proficiency in C/C++ and Python.
• Knowledge of AI tooling and frontier models.
• Ability to work effectively in a hands-on research and lab environment.
• Strong self-initiative and self-motivation.
• Experience with RE tools such as Ghidra, IDA, Binary Ninja, OFRAK.
• Experience with virtual environments, Docker containers, and ZeroTier.
• Knowledge of FPGA, CPLD, VHDL, Verilog, state machine analysis.

Responsibilities

• Research security vulnerabilities to protect embedded devices from firmware, hardware, and platform-level threats.
• Design and implement host-based defense software for black-box embedded devices.
• Analyze firmware images, boot chains, update mechanisms, device interfaces, and embedded operating systems.
• Design and implement automated HW / SW testing infrastructure.
• Conduct offensive and defensive research on embedded HW / SW.
• Contribute to the OFRAK (Open Firmware Reverse Analysis Konsole) framework.
• Perform HW / SW reverse engineering on embedded devices.
• Automate vulnerability identification for embedded software.
• Use AI tooling, agents, MCP servers, and test harnesses to accelerate security research and vulnerability analysis.

Skills

C/C++

Python

Reverse engineering

Fuzzing

Static analysis

OS design

AI tooling

Lab research

Self-motivation

Verilog

VHDL

Ghidra

IDA Pro

Binary Ninja

OFRAK

Docker

Virtual machines

UART

JTAG

I2C

PCIe

Verilog

VHDL

Lab OS design

Education

BA/BS in Computer Science or Electrical Engineering

MA/MS/PhD in Computer Science or related field

Tools

Ghidra

IDA Pro

Binary Ninja

OFRAK

Docker

Virtual Machines

ZeroTier

Job description

Red Balloon Security (RBS) is a leading embedded security provider and research firm committed to securing embedded devices across a range of critical industries and shaping the future of the embedded security industry. For more than 15 years, Red Balloon Security has built mission-grade firmware and embedded security for the most sensitive defense, intelligence, and critical infrastructure systems. Our customers include the DoW, Air Force, Navy, Space Force, Homeland Security, large defense contractors, and several Fortune 500 companies. Additionally, our R&D team consists of world-class academic researchers and developers, who consistently publish seminal research papers in the field of embedded security and perform high-profile research programs funded by the U.S. Government, including DARPA, Air Force, Space Force, Navy, and the Department of Homeland Security.

Job Description

• Research security vulnerabilities to protect embedded devices from firmware, hardware, and platform-level threats
• Design and implement host-based defense software for black-box embedded devices
• Analyze firmware images, boot chains, update mechanisms, device interfaces, and embedded operating systems
• Design and implement automated HW / SW testing infrastructure
• Conduct offensive and defensive research on embedded HW / SW
• Contribute to the OFRAK (Open Firmware Reverse Analysis Konsole) framework
• Perform HW / SW reverse engineering on embedded devices
• Automate vulnerability identification for embedded software
• Use AI tooling, agents, MCP servers, and test harnesses to accelerate security research and vulnerability analysis

Required Skills and Qualifications

• BA/BS in computer science, computer or electrical engineering or a related major
• 5+ years of experience in security research
• Proficiency in hardware and software reverse engineering
• Familiarity with fuzzing, static analysis, and RE
• Experience with low-level software design and implementation
• Understanding of modern software design and engineering practices
• Proficiency in C/C++ and Python
• Knowledge of AI tooling and familiarity with frontier models
• Ability to work effectively in a hands-on research and lab environment
• Strong self-initiative and self-motivation
• Experience with RE tools such as Ghidra, IDA, Binary Ninja, OFRAK
• Experience with virtual environments, Docker containers, and ZeroTier
• Knowledge of FPGA, CPLD, VHDL, Verilog, state machine analysis

Preferred Skills and Qualifications

• MA/MS/PhD in Computer Science or related field
• Experience with ARM, MIPS, PowerPC, x86, or RISC-V assembly
• Strong understanding of OS design and implementation
• Knowledge of vulnerability discovery methods and practical exploitation techniques
• Knowledge of embedded interfaces and protocols such as UART, SWD, SPI, JTAG, I2C, USB, Ethernet, CAN, or similar technologies
• Familiarity with high speed buses such as PCIe, Serdes, DDR5
• Knowledge of logic analyzers, HW debuggers, spectrum analyzers, signal generators, oscilloscopes, RF, test equipment, signal integrity
• Existing security clearance or ability to obtain clearance

Our Work

Our published research includes Thrangrycat, a persistent bypass of Cisco's proprietary secure boot, and the Siemens SIMATIC S7-1500 protected-boot bypass (redballoonsecurity.com/research). Recent work from the team includes a controlled lab replay of the public Copy Fail Linux kernel exploit (CVE-2026-31431) on an embedded Linux target configured with Symbiote, our runtime protection; RASPUTIN, our human-on-the-loop hardware reversing robot; and OFRAK, our open-source binary analysis and modification platform for firmware (ofrak.com).

Compensation and Benefits

This is a full-time position - can be in office in NYC or remote

NY Salary Range: $150k-$225k

Full-time employees are also eligible for discretionary bonuses and equity in the company.

Red Balloon Security offers a full benefits package, 401k, flexible vacation policy, and paid health and dental plans. The Company is located in Midtown West in New York City. Red Balloon Security is an Equal Opportunity Employer.