Security Consultant – Hardware Specialist

K2 Integrity • ,

3d • Remote

About The Position

Leviathan Security Group is seeking a bright, independent Security Consultant with a hardware specialization. The role is suited to someone passionate about rapidly learning new technologies, identifying deviations from industry-standard security practices, and applying a holistic understanding of security to customer challenges. Work includes common network and web and mobile application penetration testing, as well as assessments of novel technologies such as IoT devices and proprietary network protocols.

This is a remote role in the USA. Responsibilities include threat modeling, code review, penetration testing, technical writing, and occasional customer interaction.

Requirements

• Bachelor’s degree or international equivalent.
• In-depth, applied knowledge of hardware analysis.
• Working proficiency in at least two of the following: network penetration testing, application penetration testing, cloud security assessment, or code review.
• 2–4+ years of experience in the security industry.
• Familiarity with hardware debug interfaces such as JTAG and SWD.
• Experience performing firmware or binary analysis on at least one of these architectures: ARM (AArch64 and Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa.
• Familiarity with common firmware and platform security mechanisms, including secure boot, Trusted Execution Environments, System Management Mode, measured boot and TPM-based attestation, hardware root of trust, secure update with anti-rollback, and fuse or debug port lockdown.
• Hands-on development experience in firmware, software, or hardware, and understanding of security fundamentals.
• A successful track record of delivering quality results in complex projects.
• Strong written and verbal communication skills.
• Knowledge of network and web-related protocols such as TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols.

Nice To Haves

• A technical degree.
• Familiarity with additional embedded architectures such as 8051, AVR, ARC, or TriCore.
• Experience with Python, Java, C, C++, or C#; deep knowledge of one or more of these languages is beneficial.

Responsibilities

• Perform threat modeling.
• Conduct code reviews.
• Perform penetration testing, including work involving hardware and other novel technologies.
• Write technical documentation describing practices, observations, and recommendations.
• Interface with customers from time to time.
• Assess a variety of technologies, often requiring substantial ramp-up.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level