Be an early applicantLess than 25 applicants

Company

Praetorian · 4 hours ago

Senior Offensive Security Engineer (IoT)

United States

Full-time

Remote

Mid, Senior Level

$120K/yr - $175K/yr

2+ years exp

Maximize your interview chances

Cloud SecurityCyber Security

Growth Opportunities

No H1B

Hiring Manager

Kevin Bordlemay

Insider Connection @Praetorian

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Provide technical execution on challenging offensive security projects focused on IoT Security for our customers

Identify nuanced vulnerabilities in advanced systems

Develop custom methodologies, payloads, exploits, and tools to ensure project success

Develop documentation for novel mitigation strategies to emerging or undocumented security risks identified in client environments

Develop comprehensive reports and presentations for our customers

Serve as a mentor to other engineers in their technical and professional development

Collaborate with the security community to develop novel attack techniques, tactics, and procedures (TTPs) through Praetorian’s Security Blog and other forms of community engagement

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Offensive SecurityIoT SecurityFirmware AnalysisEmbedded CryptographyWireless ProtocolsProduct Security TestingNetwork Security TestingWeb Application Penetration TestingCloud SecuritySecure Code ReviewReverse EngineeringVulnerability ResearchExploit DevelopmentTechnical ReportingGolangPythonSecurity CompetitionsVulnerability Research Track RecordOpen Source ContributionSecurity CertificationsCustomer Centric Focus

Required

Demonstrated passion for offensive security and adversarial engineering

2+ years of IoT security experience in one or more cross-functional areas: hardware or software reverse engineering, firmware analysis, embedded cryptography, wireless protocols, glitching/side-channel analysis, or IoT PaaS security

Additional experience in at least 3 of the following: Product Security Testing (Application, Mobile, LLM), Network Security Testing and/or Red Team, Web Application Penetration Testing, Cloud Security (AWS, Azure, GCP), Secure Code Review, Reverse Engineering, Vulnerability Research/Exploit Development

Understanding of threat models, attack paths and intelligence considerations within the scoping of technical projects

Ability to write technical reports and present technical findings both internally and externally

Experience with startup and/or high-tech companies

Preferred

Prior security consulting experience a major plus

Software development experience in core offsec languages such as golang or python

Capture-the-flag, CCDC, CPTC or other security related competitions

Ranked achievements on testing platforms such as Hack the Box, Tryhackme, Portswigger and similar

Track record in vulnerability research, exploit development, and CVE assignments

Demonstrated open source contribution with git commits to popular offsec projects

Security community experience via presentations, conference attendance, blogs, white papers and similar

PNPT, BSCP, OSCP, OSWE, OSCE, OSEP, OSED, CRTO, cloud certifications and similar

Bachelors degree in computer science, computer engineering, mathematics, or physics

Benefits

Equity Incentive Plan, offering ownership stakes in the company

Continuous learning opportunities through our internal Learning & Development (L&D) program, including training, certifications, and conferences to support your career growth

Recognition and rewards for speaking engagements at industry events and conferences

Comprehensive health and dental insurance coverage

Immediate 401(k) matching

Paid maternity and paternity leave