This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Consultant – Hardware Specialist based in the United States.
As a Security Consultant specializing in hardware security, you will help organizations identify and address vulnerabilities across complex hardware, software, and connected technology environments. You will work on diverse security assessments, ranging from embedded devices and IoT technologies to proprietary network protocols and advanced software systems. Combining hands-on technical expertise with a holistic understanding of cybersecurity, you will investigate emerging technologies and evaluate their security against industry standards and best practices. Your work will involve threat modeling, code reviews, penetration testing, and detailed technical reporting. You will collaborate with clients and technical teams to translate complex findings into actionable security recommendations. This is an opportunity to tackle challenging projects, continuously expand your technical knowledge, and contribute to innovative security solutions in a fully remote environment.
- Conduct comprehensive hardware security assessments, analyzing embedded devices, IoT products, proprietary technologies, and other complex systems to identify vulnerabilities and security weaknesses.
- Perform hardware analysis and investigate potential attack surfaces, including hardware debug interfaces such as JTAG and SWD.
- Analyze firmware and binary components across different processor architectures, identifying security flaws and deviations from established security practices.
- Conduct threat modeling, source code reviews, network penetration testing, and application security assessments as required by client projects.
- Evaluate hardware and platform security mechanisms, including secure boot, Trusted Execution Environments, hardware roots of trust, TPM-based attestation, secure firmware updates, and debug port protection.
- Assess network infrastructure, communication protocols, and connected systems using industry-standard security testing tools.
- Develop and execute technical testing methodologies tailored to different technologies and customer environments.
- Document technical findings, security observations, vulnerabilities, and recommendations through clear, detailed reports.
- Communicate assessment results and security recommendations to clients, helping them understand technical risks and potential mitigation strategies.
- Adapt quickly to unfamiliar technologies and complex project requirements while maintaining high standards of technical quality and delivery.
Requirements:
- Bachelor's degree or international equivalent required, ideally in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or another technical discipline.
- At least 2–4 years of professional experience in the cybersecurity industry.
- In-depth, hands-on knowledge of hardware security analysis, combined with working proficiency in at least two of the following areas: network penetration testing, application penetration testing, cloud security assessments, or source code review.
- Practical experience with hardware debugging and analysis interfaces, particularly JTAG and Serial Wire Debug (SWD).
- Experience conducting firmware or binary analysis on at least one processor architecture, such as ARM (AArch64 or Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures, including 8051, AVR, ARC, and TriCore, is an advantage.
- Understanding of firmware and platform security mechanisms, including secure boot, Trusted Execution Environments (TEEs), System Management Mode (SMM), measured boot, TPM-based attestation, hardware roots of trust, secure updates with anti-rollback protection, and fuse or debug port lockdown.
- Practical development experience in at least one of the following areas: firmware engineering, software development, or hardware design. Ability to understand embedded firmware, software applications, hardware schematics, and their associated security principles.
- Strong programming skills in one or more languages, such as Python, Java, C, C++, or C#, with the ability to analyze and understand unfamiliar technologies and codebases.
- Solid understanding of network technologies and protocols, including TCP/IP, UDP, IPsec, HTTP, HTTPS, and routing protocols.
- Familiarity with security testing and network analysis tools such as Burp Suite, Nmap, and Netcat.
- Proven ability to deliver high-quality technical results across complex projects, independently managing research and adapting quickly to new technical environments.
- Excellent written and verbal communication skills, with the ability to document technical methodologies, explain security findings, and present practical recommendations.
- Strong analytical thinking, intellectual curiosity, attention to detail, and a proactive approach to identifying security risks.
- Ability to work independently in a remote environment while collaborating effectively with technical teams and clients.
Benefits:
- Remote work: Fully remote position based in the United States.
- Technical variety: Opportunity to work with innovative technologies, embedded systems, IoT devices, proprietary protocols, and complex security environments.
- Professional development: Continuous exposure to emerging technologies and challenging cybersecurity projects.
- Technical ownership: Opportunity to independently investigate complex security challenges and develop tailored assessment approaches.
- Industry exposure: Experience working across multiple areas of cybersecurity, including hardware, software, networks, and application security.
- Collaborative environment: Opportunities to exchange knowledge and work alongside experienced security professionals.
- Career growth: Develop specialized expertise in hardware security while expanding broader penetration testing and security assessment capabilities.
