Hardware Security Consultant, Penetration Tester

🔥 12 hours ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $80k - $150k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔧 QA Engineer (Quality Assurance)

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

TrustedSec

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

🔒 Cybersecurity

💼 Consulting

🤝 B2B

Cybersecurity • Consulting • B2B

TrustedSec is a cybersecurity consulting firm that provides advisory, assessment, hardening, incident response, and compliance services to organizations. Founded by David Kennedy in 2012, TrustedSec delivers custom security engagements (design, evaluate, harden, respond), research and open-source tools, AI-focused security services, and training/webinars. The company serves government entities, Fortune 500s, and other enterprises, emphasizes adversary-informed, expertise-led approaches, and holds industry recognitions such as CREST certification and participation in OpenAI’s Daybreak Defense Network.

📋 Description

• Assist clients with hardware security needs • Conduct hardware security assessments to identify vulnerabilities • Evaluate hardware, companion mobile applications, and backend web infrastructure as a single system • Perform dedicated web application security assessments • Produce clear, technically accurate reports with testing walkthroughs, findings, and actionable recommendations for technical and executive audiences • Conduct client meetings, serve as the primary point of contact, and interface directly with clients • Serve as a subject matter expert for other consultants and teams • Collaborate across teams and contribute to TrustedSec’s security knowledge and staff development • Maintain and build cybersecurity knowledge through workshops and continuous learning • Review publications, write blog posts, and potentially speak at conferences or other events • Report to the Practice Lead • Travel to client sites and industry-related events

🎯 Requirements

• Legally authorized to work in the United States • Must reside in the United States; applicants outside the United States will not be considered • 2+ years' recent experience performing hardware security assessments • 2+ years' recent experience testing web applications and APIs • Experience identifying and interfacing with JTAG, SWD, and UART debug interfaces, including locating undocumented test points • Experience with firmware extraction and analysis, including extraction via debug interfaces, chip-off, or vendor update files • Proficiency with Ghidra, Binary Ninja, or equivalent for firmware reverse engineering • Experience assessing Wi-Fi and Bluetooth communications, including traffic flows between devices and mobile applications • Proficiency in Burp Suite or another intercepting proxy • Familiarity with Wireshark for non-HTTP network traffic • Experience escaping restricted environments on self-service terminals • Knowledge of manual application security testing, penetration testing methodologies, the OWASP Top 10, and the OWASP Testing Guide • Strong understanding of common security controls and vulnerability testing techniques • Good time management and ability to meet strict deadlines • Demonstrated analytical and project management skills • Excellent verbal and written communication, active listening, and presentation skills • Ability to write technically accurate documents and distill information for non-technical readers • Ability to work collaboratively, take initiative, and work independently • Ability to lift 50 pounds occasionally • Ability to travel up to 25% annually, including onsite client engagements • Desired: cellular-connected device assessment, AT commands, SIM extraction, IMEI spoofing, scripting, AI/LLMs/frontier models/agentic tools/coding assistants, mobile application testing, consulting experience, and industry-recognized security certifications such as OSCP, Burp Suite Certified Practitioner, or OSWE

🏖️ Benefits

• Generous paid time off allowance • Paid holidays • Performance pay bonus program • Remote work from home within the United States

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume