Senior Penetration Testing Engineer

Job Summary

Seeking a full-time Senior Penetration Testing Engineer, this remote position will conduct hands-on penetration tests for connected devices, embedded systems, and automotive platforms, utilizing Finite State's firmware analysis platform to deliver actionable findings and risk assessments for clients.

Key responsibilities

• Plan and execute penetration tests against IoT, ICS/OT, and automotive targets, managing engagements autonomously from scoping to reporting
• Perform hardware interaction and firmware extraction using various techniques, and conduct firmware reverse engineering to identify vulnerabilities
• Produce high-quality technical reports that communicate findings and remediation guidance to both technical and executive audiences

Required qualifications

• Bachelor's degree in Computer Science, Electrical Engineering, or related field, plus 7+ years of hands-on experience in IoT, embedded, ICS/OT, or automotive security
• Demonstrated expertise in hardware-level security assessments, including JTAG/SWD debugging and flash memory extraction
• Proficiency with firmware reverse engineering tools such as Ghidra and/or Binary Ninja
• Experience testing wireless protocols and familiarity with vehicle buses or industrial control protocols
• Ability to read and review source code in C and C++ to identify security weaknesses in embedded software