Senior Engineer – Penetration Testing

Vaga não está no LinkedIn

🕒 Outubro 29

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

👻 Score fantasma 14%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Finite State

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2017

🏥 Saúde

🍽️ Alimentos e Bebidas

🏭 Manufatura

Healthcare • Food & Beverage • Manufacturing

A Finite State é um provedor líder de soluções completas de gerenciamento de risco de software, focado na proteção de ativos digitais e no aumento da segurança de dispositivos conectados em várias indústrias. Sua plataforma é projetada para lidar com os desafios exclusivos da segurança de dispositivos, como longos ciclos de vida, cadeias de suprimento complexas e questões de transparência dos fornecedores. A Finite State oferece soluções para segurança da cadeia de suprimentos de software, gestão de SBOM, resposta a incidentes e gestão de vulnerabilidades, ajudando as organizações a aderir à conformidade cibernética e gerenciar riscos de forma eficaz. Com capacidades para escanear código-fonte, binários e componentes de terceiros, a Finite State oferece visibilidade e proteção inigualáveis para uma ampla gama de dispositivos conectados, incluindo aqueles dos setores automotivo, médico, industrial, energético e governamental.

Descrição

• Plan and execute penetration tests against IoT, ICS/OT, and automotive targets • Own engagements autonomously, including scoping, attack-surface prioritization, testing, evidence collection, reporting, and debriefing • Use Finite State’s platform analysis alongside hands-on testing to identify genuinely reachable and exploitable vulnerabilities • Perform hardware interaction and firmware extraction using JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash dumping • Solder and rework PCBs to access debug interfaces • Conduct firmware reverse engineering with Ghidra and Binary Ninja • Assess wireless protocols including Bluetooth/BLE, Zigbee, Z-Wave, Wi-Fi, and LTE/5G • Assess vehicle buses and industrial control protocols • Assess standard network protocols, exposed services, cloud and mobile companion apps, and APIs • Perform source code review in C, C++, and related embedded languages • Review third-party and open-source components, including SBOM review and software composition analysis • Use approved AI-powered security tooling and LLM-assisted workflows for analysis, triage, and reporting • Evaluate products against relevant regulations and standards • Produce reports communicating technical findings, risk ratings, CVSS scores, exploitability, VEX justifications, and remediation guidance • Participate in peer review of engagement deliverables • Support customer scoping calls, technical debriefs, and remediation follow-up • Collaborate with product, engineering, and research teams to improve the Finite State platform • Contribute to knowledge sharing, tooling development, and methodology improvement • Participate in conferences, publish research, and represent Finite State externally

🎯 Requisitos

• Bachelor's degree in Computer Science, Electrical Engineering, Computer Engineering, or a related field, or equivalent hands-on experience • 7+ years of hands-on experience in IoT, embedded, ICS/OT, or automotive security • Track record of owning engagements autonomously at a senior level • Hands-on depth in at least one target domain: IoT/embedded, ICS/OT, or automotive; working familiarity with the other two • Experience with hardware-level security assessments, including JTAG/SWD debugging, SPI/I2C/UART communication, and flash memory extraction • Comfort soldering and reworking PCBs to reach debug interfaces • Proficiency with Ghidra and/or Binary Ninja • Ability to analyze ARM, MIPS, PPC, RISC-V, x86, and x64 architectures • Experience testing wireless protocols and either vehicle buses or industrial control protocols • Working familiarity with network protocols and web/mobile application testing methodology • Ability to review C and C++ source code for security weaknesses • Familiarity with SBOM concepts and formats including CycloneDX and SPDX • Working fluency with CVSS scoring and VEX • Ability to map findings to at least one relevant regulatory or standards framework • Excellent written and verbal communication skills • Experience with Python and Bash scripting and automation • Familiarity with AI-assisted security tooling and LLM-based workflows • Must be authorized to work in the U.S. without sponsorship

🏖️ Benefícios

• Finite State ships and funds a bench lab, including soldering and rework station, probes, programmers, logic analyzer, and radios • Fully distributed workforce and remote-first culture • Limited travel, including occasional customer-site assessments, conferences, and team gatherings • Opportunities for platform integrations, direct account ownership, and building business-driving tools • Opportunities for industry conference participation, publishing research, and external representation

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo