Job descriptionWe are looking for bright and independent individuals to join our Leviathan Security Group practice area. Our company continues to pave the way in the security industry through our philosophy and work ethic. We are seeking someone with a passion for rapidly learning new technologies and identifying deviations from industry standard security practices. Much of the work we do is network and web and mobile application penetration testing. However, we often receive work that represents some of the most unique and novel technologies on the market, ranging from IoT devices to proprietary network protocols.
While your primary background is in software and security, you are passionate about holistic security and understanding the fundamental problems that our customers face.
This is a remote role in the USA.
Job requirementsYour responsibilities include threat modeling, code review, penetration testing, technical writing, and interfacing with customers from time to time.
Job responsibilities- Bachelor's degree or international equivalent is required.
- A technical degree is ideal, although not required.
- In-depth and applied knowledge of hardware analysis, along with working proficiency in at least 2 of the following: network penetration testing, application penetration testing, cloud security assessment, code review.
- 2-4+ years of experience in the security industry.
- Familiarity with hardware debug interfaces (e.g., JTAG, SWD).
- Experience performing firmware or binary analysis on at least one of the following architectures: ARM (AArch64 and Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures (8051, AVR, ARC, TriCore, etc) is a plus.
- Familiarity with common firmware and platform security mechanisms such as secure boot, Trusted Execution Environments, System Management Mode, measured boot and TPM-based attestation, hardware root of trust, secure update with anti-rollback, and fuse or debug port lockdown.
- Hands-on development experience in one or more of firmware, software, or hardware: you have written embedded firmware, built software applications, or worked with hardware designs and schematics, and understand the security fundamentals.
- Successful track record of delivering quality results in complex projects - you will assess a variety of technologies, often requiring quite a bit of ramp.
- Python, Java, C, C++, or C# experience - having a deep level of knowledge of one or more of these languages will be beneficial to understanding new technologies.
- Strong written and verbal communication skills - you will be documenting your practices, observations, and recommendations.
- Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) - you will be leveraging industry standard tools such as BURP, Nmap, netcat, and others to perform network analysis.
