Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Conduct high-end security evaluations on embedded devices and develop innovative attack methods.
- Company: Join IOActive, a leader in cyber security with a collaborative culture.
- Benefits: Competitive pay, performance incentives, travel opportunities, and access to top technical teams.
- Why this job: Make a real-world impact in cyber security while working with cutting-edge technology.
- Qualifications: 3-5 years of experience in cyber security and strong analytical skills required.
- Other info: Dynamic team environment focused on innovation and professional growth.
The predicted salary is between 36000 - 60000 £ per year.
Overview of the Embedded Device Security Consultant role at IOActive, Inc. This is not a remote position and it is expected to report for work at our security lab in Cheltenham, United Kingdom.
What You'll Do
- Perform high-end security evaluations and research for clients, focused on a range of embedded devices.
- Work with team members to deliver high-quality results to IOActive's clients worldwide.
- Investigate possible logical attack scenarios by interpreting code review findings, orienting attack paths, and analyzing test results.
- Develop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded products.
- Create tools to assist in project goals.
- Communicate complex vulnerabilities to both technical and non-technical client staff.
- Perform research on new attack vectors, discover new vulnerabilities, and create new exploitation techniques.
- Evangelize IOActive Labs through blogs, white papers, presentations, etc.
- Support business development efforts through the scoping of engagements.
What You Bring
- Required Technical Skills
- Rapid identification of attack surfaces and entry points using implicit threat modeling techniques.
- Ability to connect and use JTAG/on-chip Debuggers.
- Low-level C code review.
- FreeRTOS, Android, Linux kernel drivers, protocol parsing.
- Sandbox policy review: SELinux/SE Android, seccomp, Linux namespaces, Minijail/Firejail.
- Crypto implementation code reviews, specifically for secure boot and code signing.
- Java, especially Android app side.
- ARM 32- and 64-bit assembly.
- Extensive Git/GitHub experience.
- Wi-Fi/Bluetooth.
- Reverse engineering, specifically firmware.
- Hardware/embedded system hacking.
- Vulnerability assessment and penetration testing.
- Knowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage.
- Ability to work independently under deadline.
- Rigorous attention to detail and strong analytic skills.
- Ability to write test plans based upon initial impressions and discussions with the team.
- Comfortable navigating large codebases with minimal guidance.
- Excellent command of written and spoken English.
- Comfortable working as part of a multinational and multidisciplinary team.
- Logical and structured approach to projects.
- 3-5 years or more of relevant work experience in a high-paced, enterprise consulting environment.
What We Offer
- A chance to work with an industry leader in cyber security.
- Access to world-class technical teams and research.
- A high-energy, collaborative team that values innovation.
- Opportunities for travel.
- Competitive compensation and performance-based incentives.
If this sounds like your kind of challenge, we'd love to hear from you. Let's talk!
Why IOActive
The IOActive mission is to make the world a safer, more secure place from cyber threats with research and services that focus on security with real-world impact. Join a team committed to making a difference.
IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
Embedded Device Security Consultant - Cheltenham in London employer: IOActive, Inc.
Contact Detail:
IOActive, Inc. Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Embedded Device Security Consultant - Cheltenham in London
✨Tip Number 1
Network like a pro! Get out there and connect with folks in the industry. Attend meetups, conferences, or even local tech events. You never know who might be looking for someone with your skills!
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects and any cool tools you've developed. This gives potential employers a taste of what you can do and sets you apart from the crowd.
✨Tip Number 3
Prepare for interviews by practicing common questions and scenarios related to embedded device security. Role-play with a friend or use online resources to get comfortable discussing your experience and technical knowledge.
✨Tip Number 4
Don't forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, it shows you're genuinely interested in joining our team at IOActive.
We think you need these skills to ace Embedded Device Security Consultant - Cheltenham in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Embedded Device Security Consultant role. Highlight relevant experience and skills that match the job description, especially those related to embedded devices and security evaluations.
Craft a Compelling Cover Letter: Your cover letter should tell us why you're the perfect fit for this role. Share specific examples of your past work that demonstrate your skills in security assessments and your ability to communicate complex vulnerabilities.
Showcase Your Technical Skills: Don’t shy away from listing your technical skills! We want to see your experience with JTAG, low-level C code, and any other relevant tools or languages. Be specific about your expertise in areas like vulnerability assessment and penetration testing.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows us you’re keen on joining our team!
How to prepare for a job interview at IOActive, Inc.
✨Know Your Stuff
Make sure you brush up on your technical skills, especially around embedded devices and security. Be ready to discuss your experience with JTAG, low-level C code, and any relevant tools you've used. The more you can demonstrate your expertise, the better!
✨Showcase Your Problem-Solving Skills
Prepare to talk about specific challenges you've faced in previous roles and how you tackled them. Use examples that highlight your analytical skills and attention to detail, especially when it comes to identifying vulnerabilities or developing attack scenarios.
✨Communicate Clearly
Since you'll need to explain complex vulnerabilities to both technical and non-technical staff, practice articulating your thoughts clearly. Think about how you would explain a complicated concept in simple terms, as this will be crucial during your interview.
✨Be a Team Player
IOActive values collaboration, so be prepared to discuss how you've worked within a team in the past. Share examples of how you contributed to group projects and supported your colleagues, as this will show you're a good fit for their high-energy, collaborative environment.
