Penetration Tester

TP-Link Systems Inc. • Irvine, CA

1d • $80,000 - $132,000

About The Position

TP-Link Systems Inc. is seeking a skilled, proactive Penetration Testing Engineer focused on embedded devices. Under the guidance of senior team members, this role supports embedded product projects and performs security activities for a product category, including penetration testing, threat modeling, module security assessments, and investigation, risk assessment, and verification for incident response. The role is suited to someone with a foundational cybersecurity background who is eager to learn and improve the security of embedded devices.

The position also contributes to product security certification, security testing tools and automation, secure development lifecycle processes, and the implementation of global cybersecurity standards and regulatory requirements. The stated salary range is $80,000–$132,000. TP-Link does not offer visa sponsorship at this time.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• 1–3 years of experience as an embedded-device Security Engineer or in a similar role.
• Strong knowledge of protocol security design, cryptography, security frameworks, and common vulnerabilities.
• Experience with security tools such as Burp Suite, Nmap, Kali, Nessus, Metasploit, IDA, or Ghidra.
• Ability to optimize penetration-testing tools and fuzzing strategies.
• Ability to analyze SAST results and conduct basic reverse engineering.
• Proficiency in at least one programming language, such as C/C++, Python, Bash, or PowerShell.
• Strong communication and interpersonal skills, and ability to work independently and collaborate with cross-functional teams.
• Willingness to learn, work under guidance, and take constructive feedback.
• Team-oriented approach, ability to follow technical direction, and constructive contribution to group tasks.

Nice To Haves

• Advanced security certifications, such as OSWP.
• Published CVEs.

Responsibilities

• Perform penetration testing on embedded products, identify vulnerabilities, recommend remediation, and write detailed test reports.
• Conduct threat modeling to identify and evaluate potential risks for specific modules.
• Handle incident response for a specific area, including investigation, containment, remediation, and post-incident analysis; coordinate resolution with cross-functional teams.
• Analyze product security certification requirements and collaborate with cross-functional teams to achieve certification.
• Assist in developing penetration-testing tools, automated testing platforms, and scripts to improve testing efficiency and accuracy.
• Participate in developing and improving SDLC processes so that security is incorporated during product development.
• Interpret global cybersecurity standards and regulatory requirements and support implementation of security requirements.

Benefits

• Fully paid medical, dental, and vision insurance, with partial coverage for dependents.
• Contributions to 401(k) funds.
• Over four weeks of PTO per year.
• Bi-annual pay increases.
• Health and wellness benefits, including a free gym membership.
• Quarterly team-building events.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level