Product Security Engineer As a Product Security Engineer, You Will: • Perform product security testing and reporting, including but not limited to: - Black box reverse engineering of hardware and firmware - Vulnerability research - Exploit development - Fuzz testing - Protocol reverse engineering • Conduct manual penetration testing, including but not limited to: o Mobile Applications (iOS & Android) o Web Applications o Cloud Infrastructure o Network Systems • Facilitate threat modeling with application, infrastructure, and product teams. • Perform security training and outreach to internal development teams. • Perform security analysis & evaluation of ICS/OT environments related to product manufacturing. • Perform security analysis & evaluation of both hardware and software supply chains. • Maintain documentation and metrics for the product security program’s services. Experience Desired: Minimum Qualifications: • Minimum of 5 years of experience with any combination of the following: embedded systems and IoT security, red teaming, or penetration testing • Experience conducting security testing of embedded hardware and the ability to identify and manipulate debug interfaces (UART, JTAG, SWD, etc.) and peripheral buses (SPI, I2C, etc.) • Binary Reverse Engineering of ARM, MIPS, and PowerPC firmware using industry-standard tools such as IDA Pro, Binary Ninja, Ghidra, etc. • Experienced planning and executing Red Team exercises. • Experience in Fuzz Testing of industrial communication protocols like Wi-Fi / BLE / Wireless HART / PROFINET/ MODBUS / Ethernet IP/ OPC UA/ HART /FF • Understanding of secure libraries (e.g., bootloader, etc.) • Knowledge of embedded Linux required, knowledge of Real-Time Operating Systems a plus. • Understanding network, web, IoT, and industrial-related protocols (such as TCP/UDP, HTTPS, MQTTS, CoAP, Modbus, Ethernet/IP, DNP3, OPC-UA, etc.) • Excellent written and verbal communication skills. • Strong sense of ownership, urgency, and drive • Sharp analytical skills with the ability to synthesize new information quickly.
