Senior Embedded Security Consultant - Cheltenham

Black6; Cheltenham; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading cybersecurity firm in Cheltenham is seeking a Senior Embedded Security Consultant to evaluate advanced security measures for embedded devices. The role requires expert knowledge in programming languages, vulnerability assessments, and the latest security methods. Candidates should have 3-5 years of relevant experience and the ability to work independently in a dynamic environment. This position offers competitive compensation and opportunities for travel.

Benefits

Access to world-class technical teams

Opportunities for travel

Competitive compensation

Qualifications

• Expert knowledge in C, Java, assembly languages, open platforms, and cryptography.
• Ability to connect and use JTAG/on-chip debug tools.
• Independent work under tight deadlines.

Responsibilities

• Investigate logical attack scenarios based on code reviews.
• Develop sophisticated attack methods against embedded products.
• Communicate vulnerabilities to technical and non-technical staff.

Skills

Embedded Device Security

C programming

Java

ARM assembly

Vulnerability assessment

Reverse engineering

Cryptography

Wi-Fi/Bluetooth security

Education

3-5 years experience in cybersecurity or consulting

Job description

Overview

Senior Embedded Security Consultant - Cheltenham

This is not a Remote position. This position is expected to report for work at our security lab in Cheltenham, United Kingdom.

About IOActive

IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.

Who you are

Embedded Device Security Consultants are responsible for performing high-end security evaluations and research for our clients, focused on a range of embedded devices. In this role, you will work with other team members to deliver high-quality results to IOActive’s clients throughout the world. Our consultants maintain a high level of expertise regarding known threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography. The Embedded Device Security Consultant will undertake advanced level security evaluation tasks and duties in order to meet customer requirements and project deadlines.

What you'll do

• Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results
• Develop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded products
• Create tools to assist in project goals
• Communicate complex vulnerabilities to both technical and non-technical client staff
• Evangelize IOActive Labs through blogs, white papers, presentations, etc.
• Support business development efforts through the scoping of engagements

What you bring

Required Technical Skills

• Rapid identification of attack surfaces and entry points using implicit threat modeling techniques
• Ability to connect and use JTAG/on-chip Debuggers
• Low-level C code review
• Crypto implementation code reviews, specifically for secure boot and code signing
• Java, especially Android app side
• ARM 32- and 64-bit assembly
• Wi-Fi/Bluetooth
• Reverse engineering, specifically firmware
• Hardware/embedded system hacking
• Vulnerability assessment and penetration testing
• Knowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage

Consulting Skills+Experience

• Ability to work independently under deadline
• Rigorous attention to detail and strong analytic skills
• Ability to write test plans based upon initial impressions and discussions with the team
• Comfortable navigating large codebases with minimal guidance
• Excellent command of written and spoken English
• Comfortable working as part of a multinational and multidisciplinary team
• Logical and structured approach to projects
• 3-5 years or more of relevant work experience in a high-paced, enterprise consulting environment

What We Offer

• A chance to work with an industry leader in cyber security
• Access to world-class technical teams and research
• A high-energy, collaborative team that values innovation
• Opportunities for travel
• Competitive compensation and performance-based incentives

If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!

Why IOActive

We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We\\u2019re one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.

IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.