At a Glance
- Tasks: Conduct high-end security evaluations and research on embedded devices.
- Company: Join IOActive, a leader in cybersecurity with a mission to make the world safer.
- Benefits: Competitive pay, travel opportunities, and access to world-class technical teams.
- Other info: Collaborative environment that values innovation and personal growth.
- Why this job: Be part of a dynamic team tackling real-world security challenges with cutting-edge technology.
- Qualifications: 3-5 years in cybersecurity, expertise in C, Java, and embedded systems.
The predicted salary is between 36000 - 60000 £ per year.
OUR MISSION UNITES US
“Making the world a safer and more secure place.”
It’s our mission, plain and simple. It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us.
This is not a Remote position. This position is expected to report for work at our security lab in Cheltenham, United Kingdom.
About IOActive
IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state‑of‑the‑art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.
Who You Are
Embedded Device Security Consultants are responsible for performing high‑end security evaluations and research for our clients, focused on a range of embedded devices. In this role, you will work with other team members to deliver high‑quality results to IOActive’s clients throughout the world.
Our consultants maintain a high level of expertise regarding known threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography.
The Embedded Device Security Consultant will undertake advanced level security evaluation tasks and duties in order to meet customer requirements and project deadlines.
What You’ll Do
- Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results
- Develop sophisticated, state‑of‑the‑art attacks that integrate the latest attack methods against embedded products
- Create tools to assist in project goals
- Communicate complex vulnerabilities to both technical and non‑technical client staff
- Perform research on new attack vectors, discover new vulnerabilities, create new exploitation techniques
- Evangelize IOActive Labs through blogs, white papers, presentations, etc.
- Support business development efforts through the scoping of engagements
What You Bring
Required Technical Skills
- Rapid identification of attack surfaces and entry points using implicit threat modeling techniques
- Ability to connect and use JTAG/on‑chip Debuggers
- Low‑level C code review
- FreeRTOS, Android, Linux kernel drivers, protocol parsing
- Sandbox policy review: SELinux/SE Android, seccomp, Linux name spaces, Minijail/Firejail
- Crypto implementation code reviews, specifically for secure boot and code signing
- Java, especially Android app side
- ARM 32‑ and 64‑bit assembly
- Extensive Git/GitHub experience
- Wi‑Fi/Bluetooth
- Reverse engineering, specifically firmware
- Hardware/embedded system hacking
- Vulnerability assessment and penetration testing
- Knowledge of security‑related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage
Consulting Skills + Experience
- Ability to work independently under deadline
- Rigorous attention to detail and strong analytic skills
- Ability to write test plans based upon initial impressions and discussions with the team
- Comfortable navigating large codebases with minimal guidance
- Excellent command of written and spoken English
- Comfortable working as part of a multinational and multidisciplinary team
- Logical and structured approach to projects
- 3‑5 years or more of relevant work experience in a high‑paced, enterprise consulting environment
What We Offer
A chance to work with an industry leader in cyber security
Access to world‑class technical teams and research
A high‑energy, collaborative team that values innovation
Opportunities for travel
Competitive compensation and performance‑based incentives
Why IOActive
We have over 25 years of experience that is established and stable; yet high‑growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high‑profile, cutting‑edge space. We’re one of “the good guys” doing crazy cool stuff to threaten bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.
IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
Senior Embedded Security Consultant - Cheltenham employer: IOActive, Inc.
IOActive, Inc. is an exceptional employer that fosters a dynamic and innovative work environment in Cheltenham, perfect for those passionate about embedded device security. With competitive compensation, opportunities for travel, and a strong emphasis on employee growth, you will thrive in a culture that encourages collaboration with multinational teams while honing your skills in cutting-edge security evaluations.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Embedded Security Consultant - Cheltenham
✨Tip Number 1
Network like a pro! Reach out to current employees at IOActive on LinkedIn or attend industry events. A friendly chat can give you insider info and maybe even a referral!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those related to embedded security. This will help you stand out and demonstrate your expertise.
✨Tip Number 3
Prepare for the interview by brushing up on your technical knowledge. Be ready to discuss your experience with C, Java, and cryptography. We love seeing candidates who can talk the talk!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re serious about joining our mission!
We think you need these skills to ace Senior Embedded Security Consultant - Cheltenham
Some tips for your application 🫡
Show Your Passion:Let your enthusiasm for cybersecurity shine through in your application. We want to see that you’re not just looking for a job, but that you’re genuinely excited about making the world a safer place with us.
Tailor Your CV:Make sure your CV highlights relevant experience and skills that match the job description. We love seeing how your background aligns with our mission and the specific requirements of the Senior Embedded Security Consultant role.
Craft a Compelling Cover Letter:Use your cover letter to tell us why you’re the perfect fit for this position. Share specific examples of your work in embedded security and how you’ve tackled challenges in the past. This is your chance to stand out!
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re serious about joining our team!
How to prepare for a job interview at IOActive, Inc.
✨Know Your Stuff
Make sure you brush up on your technical skills, especially in C, Java, and assembly languages. Be prepared to discuss your experience with embedded devices and any relevant projects you've worked on. This is your chance to showcase your expertise!
✨Understand the Company Mission
IOActive is all about making the world a safer place through innovative cybersecurity solutions. Familiarise yourself with their mission and values, and think about how your personal goals align with theirs. This will help you demonstrate that you're not just looking for a job, but a purpose.
✨Prepare for Technical Questions
Expect to face some challenging technical questions during your interview. Practice explaining complex vulnerabilities and attack scenarios clearly and concisely. Use examples from your past work to illustrate your problem-solving skills and analytical thinking.
✨Show Your Passion
IOActive values creativity and passion in their team members. Be ready to share your enthusiasm for cybersecurity and any personal projects or research you've done. This will help you stand out as someone who genuinely cares about the field and is eager to contribute.
