Embedded Device Security Consultant

Job not on LinkedIn

🕒 November 25, 2025

🇺🇸 United States – Remote

💵 $80k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 28%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NCC Group

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1999

💼 Consulting

🏥 Healthcare

🎖️ Defense

Consulting • Healthcare • Defense

NCC Group is a global cyber security company that helps organizations and governments improve their digital resilience through end-to-end services. Its capabilities include technical assurance (application, hardware, network and cryptography testing), digital forensics and 24/7 incident response, managed security services, threat intelligence, vulnerability management, and consulting for strategy, risk and compliance. NCC Group also offers services like bug bounty programs, escrow services, and training to reduce cyber risk and support secure digital transformation.

📋 Description

• Perform high-end security evaluations and research for clients, focused on embedded devices • Work with team members to deliver high-quality results to clients worldwide • Investigate logical attack scenarios by interpreting code review findings, orienting attack paths, and analyzing test results • Develop sophisticated attacks using the latest attack methods against embedded products • Create tools to support project goals • Communicate complex vulnerabilities to technical and non-technical client staff • Research new attack vectors and discover vulnerabilities • Create new exploitation techniques • Promote IOActive Labs through blogs, white papers, and presentations • Support business development by scoping engagements

🎯 Requirements

• Expert knowledge of C, Java, assembly languages, open platforms, and cryptography • Rapid identification of attack surfaces and entry points using implicit threat modeling techniques • Ability to connect and use JTAG/on-chip debuggers • Low-level C code review • Experience with FreeRTOS, Android, Linux kernel drivers, and protocol parsing • Sandbox policy review experience with SELinux/SE Android, seccomp, Linux namespaces, Minijail/Firejail • Cryptographic implementation code reviews, specifically for secure boot and code signing • Java, especially Android app-side experience • ARM 32- and 64-bit assembly • Extensive Git/GitHub experience • Wi-Fi/Bluetooth • Firmware reverse engineering • Hardware/embedded system hacking • Vulnerability assessment and penetration testing • Knowledge of authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, least privilege, software attack methodologies, secure data transfer, and secure data storage • Ability to work independently under deadline • Rigorous attention to detail and strong analytic skills • Ability to write test plans based upon initial impressions and discussions with the team • Comfortable navigating large codebases with minimal guidance • Excellent command of written and spoken English • Comfortable working as part of a multinational and multidisciplinary team • Logical and structured approach to projects • 3–5 years or more of relevant work experience in a high-paced, enterprise consulting environment

🏖️ Benefits

• PTO • Holidays • Medical insurance • Dental insurance • Vision insurance • 401(k) match • Long-term disability • Short-term disability • Life insurance • Employee Assistance Program (EAP) • Business Travel Insurance • Remote or office work flexibility • Opportunities for travel • Performance-based incentives • Access to world-class technical teams and research • Collaborative team environment • Work with an industry leader in cybersecurity