Match score not available

Unlock Premium Benefits Today!
🚀 Elevate your career with priority access.
Stand out to top recruiters with Jobgether Priority Access:
  • ✅ Top Match: We help you identify job offers where you're a perfect fit.
  • ✅ Exclusive Referral Service: Connect directly with recruiters as a Jobgether Certified Premium User.
  • ✅ Personalized Feedback: Receive feedback and expert guidance on applications, and have your profile manually reviewed.

Start Your Free Trial Now!

Start my free trial

Lead Offensive Security Engineer (IoT)

Remote: 
Full Remote
Contract: 
Full time
Experience: 
Senior (5-10 years)
Work from: 
United States

Offer summary

Qualifications:

5+ years of IoT security experience, Experience in threat modeling and attack paths, Ability to write and present technical reports, Passion for cybersecurity, Experience with advanced security technologies.

Key responsabilities:

  • Lead technical execution of IO security projects
  • Identify vulnerabilities in advanced systems
  • Develop tools and strategies for security risks
  • Create comprehensive reports and presentations
  • Mentor engineers and engage with the security community
Praetorian logo
Praetorian Cybersecurity SME https://www.praetorian.com/
51 - 200 Employees
About Praetorian
Praetorian, a trusted leader in offensive security services, empowers enterprises to thrive in a digital world without compromise. Enterprise security demands the ability to proactively detect vulnerabilities and threats, yet identifying signals from noise in today’s ever-expanding attack surfaces is increasingly difficult. Our cybersecurity experts provide the deep subject matter expertise needed to defend against persistent, sophisticated attacks. Praetorian professional and managed services cover all attack vectors - external, internal, cloud, web app, secrets, phishing, and supply chain and vendor risk. With Praetorian standing guard, CISOs of the world’s largest organizations rest assured that they can accelerate digital growth without compromise.
See more Praetorian offers

Job description

Company Overview:

At Praetorian, we are bringing together the world's brightest minds in pursuit of solving the cybersecurity problem by reducing the friction of security and enabling the next wave of technological innovation. From projects that range from cryptocurrency exchanges to autonomous vehicles and from medical device platforms to space telescopes, we apply expertise and engineering to help secure our customers. 

Checkout our new hire survival guide for more information on Praetorian's mission, vision, values, and culture as well as our benefits and perks here

Career Opportunity:

  • Join an industry with massive socio, economic, and political importance in the 21st century
  • Work alongside some of the best and the brightest minds in the security industry
  • Work with prominent clients and help them solve hard security problems
  • Leave an indelible mark on a company where individual input has real impact
  • Align your career trajectory with a hyper growth company that is on the move

Core Responsibilities:

  • Lead the technical execution of challenging offensive security projects focused on IoT Security for our customers
  • Identify nuanced vulnerabilities in advanced systems
  • Develop custom methodologies, payloads, exploits, and tools to ensure project success
  • Develop documentation for novel mitigation strategies to emerging or undocumented security risks identified in client environments
  • Develop comprehensive reports and presentations for our customers
  • Serve as a mentor to other engineers in their technical and professional development
  • Collaborate with the security community to develop novel attack techniques, tactics, and procedures (TTPs) through Praetorian’s Security Blog and other forms of community engagement

Desired Qualifications:

  • Demonstrated passion for cybersecurity
  • 5+ years of IoT security experience in one or more cross-functional areas: hardware or software reverse engineering, firmware analysis, embedded cryptography, wireless protocols, glitching/side-channel analysis, or IoT PaaS security
  • Additional experience in at least 3 of the following:
    • Product Security Testing (Application, Mobile, LLM)
    • Network Security Testing and/or Red Team
    • Web Application Penetration Testing
    • Cloud Security (AWS, Azure, GCP)
    • Secure Code Review
    • Reverse Engineering 
    • Vulnerability Research/ Exploit Development
  • Understanding of threat models, attack paths and intelligence considerations within the scoping of technical projects 
  • Ability to write technical reports and present technical findings both internally and externally
  • Experience with startup and/or high-tech companies

+1 Qualifications:

  • Prior security consulting experience
  • Software or web application development experience in multiple languages
  • Experience with cutting edge technology stacks and modern security technologies
  • Advanced technical knowledge in any of the following:
    • Exploit development beyond Windows and for MacOS X or Linux 
    • Reverse engineering malware, data obfuscators, or ciphers
    • Software maturity models such as OpenSAMM, BSIMM, and SDL
    • Identity technologies for Azure AD, Auth0, Firebase, OKTA, or Google Identity
    • Secrets management such as Hashicorp Vault and cloud native KMSs
    • Containerization technologies such as Docker and registry platforms such as DockerHub, ACR, ECR, & GCR
    • Orchestration technologies such as Kubernetes and cluster management platforms such as AKS, EKS, & GKE
    • Command and control channel frameworks and deployment
    • Automotive security, ICS/SCADA, Network device security, Medical device security, Home automation security, and/or cryptocurrency wallet security
    • Hardware RE, software RE, firmware analysis, embedded cryptography, wireless protocols, Software-defined radio, glitching, side-channel analysis, and/or IoT PaaS and similar technologies
  • Capture-the-flag, CCDC, CPTC or other security related competitions
  • Ranked achievements on testing platforms such as Hack the Box, Tryhackme, Portswigger, Proving Ground and similar 
  • Pursuit of advanced learning opportunities via security training courses, conferences, personal projects and similar 
  • Track record in vulnerability research and CVE assignments
  • Security community experience via presentations, conference attendance, blogs, white papers and similar 
  • OSCE, OSEP, OSED, CRTO, cloud certifications and similar 
  • Ability to travel up to 20% to support client engagements

Desired Behaviors:

  • Fanatical passion for cybersecurity and the challenges it presents
  • Customer centric focus with an obsessive need to wow and delight each client
  • Ability to maintain high levels of output and work ethic
  • Personable individual who enjoys working in a team-oriented environment
  • Self-starter and independent learner that is able to spin up quickly
Compensation & Benefits:
  • Competitive salary
  • Equity Incentive Plan, offering ownership stakes in the company
  • Continuous learning opportunities through our internal Learning & Development (L&D) program, including training, certifications, and conferences to support your career growth
  • Recognition and rewards for speaking engagements at industry events and conferences
  • Comprehensive health and dental insurance coverage
  • Immediate 401(k) matching
  • Paid maternity and paternity leave

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. 

We are committed to an inclusive and diverse Praetorian.  We are an equal opportunity employer.  We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

Required profile

Experience

Level of experience: Senior (5-10 years)
Industry :
Cybersecurity
Spoken language(s):
English
Check out the description to know which languages are mandatory.

Hard Skills

Presentation TrainingTechnical DocumentationThreat ModelingOffensive SecurityReverse EngineeringMethods EngineeringContainerizationPath AnalysisSoftware DevelopmentCustomer EngagementControl FrameworkCloud SecurityTechnical ConsultingVulnerability Discovery

Other Skills

  • Mentorship
  • Collaboration
  • Report Writing
Are you interested?

Security Engineer Related jobs

See more Security Engineer jobs
Sign in or sign up with Google or LinkedIn