Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Conduct high-end security evaluations on embedded devices and develop advanced attack methods.
- Company: Join IOActive, a leader in cybersecurity with a dynamic and innovative culture.
- Benefits: Competitive salary, performance incentives, travel opportunities, and access to world-class technical teams.
- Other info: Collaborative environment that values innovation and offers excellent career growth.
- Why this job: Make a real impact in cybersecurity while working on cutting-edge technology.
- Qualifications: 3-5 years of experience in embedded security and strong analytical skills required.
The predicted salary is between 60000 - 80000 ÂŁ per year.
This is not a Remote position. This position is expected to report for work at our security lab in Cheltenham, United Kingdom.
About IOActive: IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK.
Who you are: Embedded Device Security Consultants are responsible for performing high-end security evaluations and research for our clients, focused on a range of embedded devices. In this role, you will work with other team members to deliver high-quality results to IOActive’s clients throughout the world. Our consultants maintain a high level of expertise regarding known threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography. The Embedded Device Security Consultant will undertake advanced level security evaluation tasks and duties in order to meet customer requirements and project deadlines.
What you'll do:
- Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results
- Develop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded products
- Create tools to assist in project goals
- Communicate complex vulnerabilities to both technical and non-technical client staff
- Perform research on new attack vectors, discover new vulnerabilities, create new exploitation techniques
- Evangelize IOActive Labs through blogs, white papers, presentations, etc.
- Support business development efforts through the scoping of engagements
What you bring:
Required Technical Skills- Rapid identification of attack surfaces and entry points using implicit threat modeling techniques
- Ability to connect and use JTAG/on-chip Debuggers
- Low-level C code review
- FreeRTOS, Android, Linux kernel drivers, protocol parsing
- Sandbox policy review: SELinux/SE Android, seccomp, Linux name spaces, Minijail/Firejail
- Crypto implementation code reviews, specifically for secure boot and code signing
- Java, especially Android app side
- ARM 32- and 64-bit assembly
- Extensive Git/GitHub experience
- Wi-Fi/Bluetooth
- Reverse engineering, specifically firmware
- Hardware/embedded system hacking
- Vulnerability assessment and penetration testing
- Knowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage
- Ability to work independently under deadline
- Rigorous attention to detail and strong analytic skills
- Ability to write test plans based upon initial impressions and discussions with the team
- Comfortable navigating large codebases with minimal guidance
- Excellent command of written and spoken English
- Comfortable working as part of a multinational and multidisciplinary team
- Logical and structured approach to projects
- 3-5 years or more of relevant work experience in a high-paced, enterprise consulting environment
What We Offer: A chance to work with an industry leader in cyber security, access to world-class technical teams and research, a high-energy, collaborative team that values innovation, opportunities for travel, competitive compensation and performance-based incentives.
If this sounds like your kind of challenge, we’d love to hear from you. Let’s talk!
Why IOActive: We have over 25 years of experience that’s established and stable; yet high-growth with the energy, passion and dynamic work environment of a startup. We are renowned for our innovation and thought leadership within our high-profile, cutting edge space. We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. Our work is great fun with great importance. Above all else, we value our people and our customers. Relationships matter.
IOActive is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. IOActive makes hiring decisions based solely on qualifications, merit, and business needs at the time.
Senior Embedded Security Consultant - Cheltenham employer: "Making the world a safer and more secure place"
Contact Detail:
"Making the world a safer and more secure place" Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Embedded Security Consultant - Cheltenham
✨Tip Number 1
Network like a pro! Get out there and connect with folks in the cybersecurity field. Attend meetups, conferences, or even local events in Cheltenham. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, research, or any cool hacks you've done. This is your chance to demonstrate your expertise in embedded security and make a lasting impression on potential employers.
✨Tip Number 3
Prepare for interviews by brushing up on your technical knowledge and soft skills. Practice explaining complex vulnerabilities in simple terms, as you'll need to communicate effectively with both techies and non-techies at IOActive.
✨Tip Number 4
Don't forget to apply through our website! It's the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining the IOActive team and contributing to our mission.
We think you need these skills to ace Senior Embedded Security Consultant - Cheltenham
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Senior Embedded Security Consultant role. Highlight your experience with embedded devices, programming languages like C and Java, and any relevant security evaluations you've conducted. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cybersecurity and how your background makes you a perfect fit for IOActive. Don’t forget to mention any specific projects or achievements that showcase your expertise.
Show Off Your Communication Skills: As a consultant, you'll need to communicate complex ideas clearly. In your application, demonstrate your ability to convey technical information in an understandable way. This could be through examples of past presentations or written reports you've created.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you're serious about joining our team at IOActive!
How to prepare for a job interview at "Making the world a safer and more secure place"
✨Know Your Stuff
Make sure you brush up on your technical skills, especially in C, Java, and assembly languages. Be ready to discuss your experience with embedded devices and any relevant projects you've worked on. This role demands a high level of expertise, so showing that you’re well-versed in the latest security threats and techniques will definitely impress.
✨Showcase Your Problem-Solving Skills
Prepare to talk about specific challenges you've faced in previous roles and how you tackled them. Think of examples where you identified vulnerabilities or developed innovative solutions. This will demonstrate your analytical skills and ability to think critically under pressure, which is crucial for this position.
✨Communicate Clearly
Since you'll be explaining complex vulnerabilities to both technical and non-technical staff, practice articulating your thoughts clearly. Use simple language to explain intricate concepts, and be prepared to answer questions from different perspectives. Good communication can set you apart from other candidates.
✨Research IOActive
Familiarise yourself with IOActive’s work, especially their approach to cybersecurity and recent projects. Understanding their values and mission will help you align your answers with what they’re looking for. Plus, it shows genuine interest in the company, which is always a plus in an interview!