Senior Engineer – Penetration Testing

Vaga não está no LinkedIn

🕒 Outubro 29

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

👻 Score fantasma 14%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Finite State

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2017

🏥 Saúde

🍽️ Alimentos e Bebidas

🏭 Manufatura

Healthcare • Food & Beverage • Manufacturing

A Finite State é um provedor líder de soluções completas de gerenciamento de risco de software, focado na proteção de ativos digitais e no aumento da segurança de dispositivos conectados em várias indústrias. Sua plataforma é projetada para lidar com os desafios exclusivos da segurança de dispositivos, como longos ciclos de vida, cadeias de suprimento complexas e questões de transparência dos fornecedores. A Finite State oferece soluções para segurança da cadeia de suprimentos de software, gestão de SBOM, resposta a incidentes e gestão de vulnerabilidades, ajudando as organizações a aderir à conformidade cibernética e gerenciar riscos de forma eficaz. Com capacidades para escanear código-fonte, binários e componentes de terceiros, a Finite State oferece visibilidade e proteção inigualáveis para uma ampla gama de dispositivos conectados, incluindo aqueles dos setores automotivo, médico, industrial, energético e governamental.

Descrição

• Plan and execute penetration tests against IoT, ICS/OT, and automotive targets • Own engagements including scoping, attack-surface prioritization, testing, evidence collection, reporting, and debriefing • Use Finite State’s platform analysis alongside hands-on testing to identify genuinely reachable and exploitable vulnerabilities • Perform hardware interaction and firmware extraction using JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash techniques • Solder and rework PCBs to access debug interfaces • Conduct firmware reverse engineering with Ghidra and Binary Ninja • Assess wireless protocols, vehicle buses, industrial-control protocols, network protocols, cloud and mobile companion apps, and APIs • Perform source-code review in C, C++, and related embedded languages • Review third-party and open-source components through SBOM review and software composition analysis • Use approved AI-powered security tooling and LLM-assisted workflows for analysis, triage, and reporting • Evaluate products against relevant regulations and standards • Produce reports with technical findings, risk ratings, remediation guidance, CVSS scores, exploitability prioritization, and VEX justifications • Participate in peer review of engagement deliverables • Support customer scoping calls, technical debriefs, and remediation follow-up • Collaborate with product, engineering, and research teams to improve platform detection capabilities • Contribute to knowledge sharing, tooling development, and methodology improvement

🎯 Requisitos

• Bachelor's degree in Computer Science, Electrical Engineering, Computer Engineering, or related field, or equivalent hands-on experience • 7+ years of hands-on experience in IoT, embedded, ICS/OT, or automotive security • Track record of owning engagements autonomously at a senior level • Hands-on depth in at least one target domain: IoT/embedded, ICS/OT, or automotive; working familiarity with the other two • Experience with JTAG/SWD debugging, SPI/I2C/UART communication, and flash memory extraction • Comfort soldering and reworking PCBs to reach debug interfaces • Proficiency with Ghidra and/or Binary Ninja • Ability to analyze ARM, MIPS, PPC, RISC-V, x86, and x64 architectures • Experience testing BLE, Zigbee, Z-Wave, Wi-Fi, and cellular protocols • Experience with vehicle buses or industrial control protocols including CAN, LIN, automotive Ethernet, Modbus, DNP3, EtherNet/IP, or OPC-UA • Familiarity with network protocols and web/mobile application testing methodology • Ability to review C and C++ source code for security weaknesses • Familiarity with SBOM concepts and CycloneDX/SPDX formats • Working fluency with CVSS scoring and VEX • Ability to map findings to a relevant regulatory or standards framework • Excellent written and verbal communication skills and technical reporting ability • Experience with Python and Bash scripting and automation • Familiarity with AI-assisted security tooling and LLM-based workflows • Must be authorized to work in the U.S. without sponsorship • Some engagements require eligibility as a U.S. person under ITAR/EAR rules

🏖️ Benefícios

• Fully distributed workforce and remote-first culture • Remote work with no relocation required • Limited travel, including occasional trips for customer-site assessments, conferences, and team gatherings • Finite State ships and funds a bench lab with soldering and rework station, probes, programmers, logic analyzer, and radios • Opportunities for platform integrations, direct account ownership, and building business-driving tools • Opportunities to participate in industry conferences, publish research, and represent Finite State externally • Equal employment opportunity and reasonable accommodations for applicants with physical and mental disabilities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo