Senior Engineer – Penetration Testing

Vaga não está no LinkedIn

🕒 Outubro 29

🌐 Estados Unidos, Canadá – Remoto

🇺🇸 Estados Unidos – Remoto (EUA) 🇨🇦 Canadá – Remoto

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

👻 Score fantasma 14%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Finite State

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2017

🏥 Saúde

🍽️ Alimentos e Bebidas

🏭 Manufatura

Healthcare • Food & Beverage • Manufacturing

A Finite State é um provedor líder de soluções completas de gerenciamento de risco de software, focado na proteção de ativos digitais e no aumento da segurança de dispositivos conectados em várias indústrias. Sua plataforma é projetada para lidar com os desafios exclusivos da segurança de dispositivos, como longos ciclos de vida, cadeias de suprimento complexas e questões de transparência dos fornecedores. A Finite State oferece soluções para segurança da cadeia de suprimentos de software, gestão de SBOM, resposta a incidentes e gestão de vulnerabilidades, ajudando as organizações a aderir à conformidade cibernética e gerenciar riscos de forma eficaz. Com capacidades para escanear código-fonte, binários e componentes de terceiros, a Finite State oferece visibilidade e proteção inigualáveis para uma ampla gama de dispositivos conectados, incluindo aqueles dos setores automotivo, médico, industrial, energético e governamental.

Descrição

• Plan and execute penetration tests against IoT, ICS/OT, and automotive targets • Own engagements autonomously, including scoping, attack-surface prioritization, testing, evidence collection, reporting, and debriefing • Use Finite State's firmware analysis platform alongside hands-on testing to identify genuinely reachable and exploitable vulnerabilities • Perform hardware interaction and firmware extraction using JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash dumping • Solder and rework PCBs to access debug interfaces • Conduct firmware reverse engineering with Ghidra and Binary Ninja • Assess wireless protocols, vehicle buses, industrial control protocols, network protocols, cloud and mobile companion apps, and APIs • Perform source code review in C, C++, and related embedded languages • Review third-party and open-source components through SBOM review and software composition analysis • Leverage approved AI-powered security tooling and LLM-assisted workflows while honoring customer data-handling and NDA constraints • Evaluate products for relevant regulatory and standards compliance • Produce technical reports with findings, risk ratings, remediation guidance, CVSS scores, exploitability prioritization, and VEX justifications • Participate in peer review of engagement deliverables • Support customer-facing scoping calls, technical debriefs, and remediation follow-up • Collaborate with product, engineering, and research teams to improve the Finite State platform • Contribute to knowledge sharing, tooling development, and methodology improvement • Participate in conferences, publish research, and represent Finite State externally

🎯 Requisitos

• Bachelor's degree in Computer Science, Electrical Engineering, Computer Engineering, or a related field, or equivalent hands-on experience • 7+ years of hands-on experience in IoT, embedded, ICS/OT, or automotive security • Track record of owning engagements autonomously at a senior level • Hands-on depth in at least one target domain: IoT/embedded, ICS/OT, or automotive; working familiarity with the other two • Experience with hardware-level security assessments, including JTAG/SWD debugging, SPI/I2C/UART communication, and flash memory extraction • Comfort soldering and reworking PCBs to reach debug interfaces • Proficiency with Ghidra and/or Binary Ninja • Ability to analyze ARM, MIPS, PPC, RISC-V, x86, and x64 architectures • Experience testing wireless protocols including BLE, Zigbee, Z-Wave, Wi-Fi, and cellular • Experience with vehicle buses or industrial control protocols including CAN, LIN, automotive Ethernet, Modbus, DNP3, EtherNet/IP, and OPC-UA • Working familiarity with standard network protocols and web/mobile application testing methodology • Ability to read and review C and C++ source code • Familiarity with SBOM concepts and formats including CycloneDX and SPDX • Working fluency with CVSS scoring and VEX • Ability to map findings to at least one relevant regulatory or standards framework • Excellent written and verbal communication skills • Experience with Python and Bash scripting and automation • Familiarity with AI-assisted security tooling and LLM-based workflows • Must be authorized to work in the U.S. without sponsorship • Some engagements may be restricted to U.S. persons under ITAR/EAR rules • Preferred qualifications include automotive security, ICS/SCADA security, CVE or responsible disclosure history, OSCP/OSWE or SANS/GIAC certifications, regulatory knowledge, static/dynamic analysis, ML-based vulnerability detection, AWS, and consulting/product security experience

🏖️ Benefícios

• Fully distributed workforce and remote-first culture • Remote work; no relocation required • Limited travel, including occasional trips for customer-site assessments, conferences, and team gatherings • Finite State ships and funds a bench lab, including soldering and rework station, probes, programmers, logic analyzer, and radios • Opportunities to expand scope into platform integrations, direct account ownership, and business-driving tools • Opportunities for industry conference participation, research publication, and external representation

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo