Security Consultant – Hardware Specialist

Accountabilities:: Conduct comprehensive hardware security assessments, analyzing embedded devices, IoT products, proprietary technologies, and other complex systems to identify vulnerabilities and security weaknesses. Perform hardware analysis and investigate potential attack surfaces, including hardware debug interfaces such as JTAG and SWD. Analyze firmware and binary components across different processor architectures, identifying security flaws and deviations from established security practices. Conduct threat modeling, source code reviews, network penetration testing, and application security assessments as required by client projects. Evaluate hardware and platform security mechanisms, including secure boot, Trusted Execution Environments, hardware roots of trust, TPM-based attestation, secure firmware updates, and debug port protection. Assess network infrastructure, communication protocols, and connected systems using industry-standard security testing tools. Develop and execute technical testing methodologies tailored to different technologies and customer environments. Document technical findings, security observations, vulnerabilities, and recommendations through clear, detailed reports. Communicate assessment results and security recommendations to clients, helping them understand technical risks and potential mitigation strategies. Adapt quickly to unfamiliar technologies and complex project requirements while maintaining high standards of technical quality and delivery. Requirements: Bachelor's degree or international equivalent required, ideally in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or another technical discipline. At least 2–4 years of professional experience in the cybersecurity industry. In-depth, hands-on knowledge of hardware security analysis, combined with working proficiency in at least two of the following areas: network penetration testing, application penetration testing, cloud security assessments, or source code review. Practical experience with hardware debugging and analysis interfaces, particularly JTAG and Serial Wire Debug (SWD). Experience conducting firmware or binary analysis on at least one processor architecture, such as ARM (AArch64 or Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures, including 8051, AVR, ARC, and TriCore, is an advantage. Understanding of firmware and platform security mechanisms, including secure boot, Trusted Execution Environments (TEEs), System Management Mode (SMM), measured boot, TPM-based attestation, hardware roots of trust, secure updates with anti-rollback protection, and fuse or debug port lockdown. Practical development experience in at least one of the following areas: firmware engineering, software development, or hardware design. Ability to understand embedded firmware, software applications, hardware schematics, and their associated security principles. Strong programming skills in one or more languages, such as Python, Java, C, C++, or C#, with the ability to analyze and understand unfamiliar technologies and codebases. Solid understanding of network technologies and protocols, including TCP/IP, UDP, IPsec, HTTP, HTTPS, and routing protocols. Familiarity with security testing and network analysis tools such as Burp Suite, Nmap, and Netcat. Proven ability to deliver high-quality technical results across complex projects, independently managing research and adapting quickly to new technical environments. Excellent written and verbal communication skills, with the ability to document technical methodologies, explain security findings, and present practical recommendations. Strong analytical thinking, intellectual curiosity, attention to detail, and a proactive approach to identifying security risks. Ability to work independently in a remote environment while collaborating effectively with technical teams and clients. Benefits: Remote work: Fully remote position based in the United States. Technical variety: Opportunity to work with innovative technologies, embedded systems, IoT devices, proprietary protocols, and complex security environments. Professional development: Continuous exposure to emerging technologies and challenging cybersecurity projects. Technical ownership: Opportunity to independently investigate complex security challenges and develop tailored assessment approaches. Industry exposure: Experience working across multiple areas of cybersecurity, including hardware, software, networks, and application security. Collaborative environment: Opportunities to exchange knowledge and work alongside experienced security professionals. Career growth: Develop specialized expertise in hardware security while expanding broader penetration testing and security assessment capabilities.