Senior Engineer - Penetration Testing

Senior engineer on Finite State's Offensive Security team, breaking into customers' connected products, from IoT devices and embedded hardware to industrial controllers and vehicle systems, through hands-on hardware and software testing. Remote in the US, with the company shipping and funding a full bench lab; travel is occasional.

The engineer owns engagements from scoping to debrief, extracts firmware through JTAG, SWD, UART and flash dumping, reverse engineers it in Ghidra or Binary Ninja, tests BLE, Zigbee, cellular, CAN and ICS protocols, reviews C and C++ code and SBOMs, and writes reports ranked by proven exploitability with CVSS and VEX. Finite State wants seven or more years in IoT, embedded, ICS/OT or automotive security, with depth in one domain, PCB rework skills and Python scripting. US work authorisation without sponsorship is required.