Logo for K2 Integrity

Security Consultant – Hardware Specialist

Role overview

Qualifications

  • Bachelor’s degree or international equivalent is required
  • In-depth and applied knowledge of hardware analysis
  • 2-4+ years of experience in the security industry
  • Familiarity with hardware debug interfaces (e.g., JTAG, SWD)

Responsibilities

  • Threat modeling
  • Code review
  • Penetration testing
  • Technical writing

Key facts

  • Remote from: United States
  • Freelance
  • Mid-level (2-5 years)
  • Security Consultant
  • English

Hard skills

Other skills

  • Communication
  • Problem Solving

About the company

K2 Integrity logo

K2 Integrity

  • Management Consulting
  • 201–500
K2 Integrity is the preeminent risk, compliance, investigations, and monitoring firm—built by industry leaders, driven by interdisciplinary teams, and supported by cutting-edge technology to safeguard our clients’ operations, reputations, and economic security. K2 Integrity represents the merger of K2 Intelligence, an industry-leading investigative, compliance, and cyber defense services firm founded in 2009 by Jeremy M. Kroll and Jules B. Kroll, the originator of the modern corporate investigations industry, and Financial Integrity Network (FIN), a premier strategic advisory firm founded by Juan Zarate and Chip Poncy dedicated to helping clients achieve their financial integrity goals. K2 Integrity leverages unmatched multidisciplinary experience to develop cutting-edge solutions, stimulate business opportunities, and shape global economic security in a complex world. Whether it’s protecting clients’ assets or navigating the complex financial regulatory landscape to help clients identify, manage, and mitigate risk, K2 Integrity is an advisor trusted to meet and exceed clients’ goals in a rapidly changing world. To learn more about how K2 Integrity is revolutionizing the management of risk, visit our website, www.k2integrity.com.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Job Summary: We are looking for bright and independent individuals to join our Leviathan Security Group practice area. Our company continues to pave the way in the security industry through our philosophy and work ethic. We are seeking someone with a passion for rapidly learning new technologies and identifying deviations from industry standard security practices. Much of the work we do is network and web and mobile application penetration testing. However, we often receive work that represents some of the most unique and novel technologies on the market, ranging from IoT devices to proprietary network protocols. 
While your primary background is in software and security, you are passionate about holistic security and understanding the fundamental problems that our customers face.
 
This is a remote role in the USA.
Job Responsibilities: Your responsibilities include threat modeling, code review, penetration testing, technical writing, and interfacing with customers from time to time.
Job Qualifications:
  • Bachelor’s degree or international equivalent is required. 
  • A technical degree is ideal, although not required.
  • In-depth and applied knowledge of hardware analysis, along with working proficiency in at least 2 of the following: network penetration testing, application penetration testing, cloud security assessment, code review.
  • 2-4+ years of experience in the security industry.
  • Familiarity with hardware debug interfaces (e.g., JTAG, SWD).
  • Experience performing firmware or binary analysis on at least one of the following architectures: ARM (AArch64 and Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures (8051, AVR, ARC, TriCore, etc) is a plus.
  • Familiarity with common firmware and platform security mechanisms such as secure boot, Trusted Execution Environments, System Management Mode, measured boot and TPM-based attestation, hardware root of trust, secure update with anti-rollback, and fuse or debug port lockdown.
  • Hands-on development experience in one or more of firmware, software, or hardware: you have written embedded firmware, built software applications, or worked with hardware designs and schematics, and understand the security fundamentals.
  • Successful track record of delivering quality results in complex projects – you will assess a variety of technologies, often requiring quite a bit of ramp.
  • Python, Java, C, C++, or C# experience – having a deep level of knowledge of one or more of these languages will be beneficial to understanding new technologies.
  • Strong written and verbal communication skills – you will be documenting your practices, observations, and recommendations.
  • Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) – you will be leveraging industry standard tools such as BURP, Nmap, netcat, and others to perform network analysis.

Related jobs

See all Security Consultant jobs

Other jobs at K2 Integrity