Staff Security Engineer
Alarm.com · Tysons, Virginia
About the role
An offensive security engineer focused on Alarm.com's IoT device ecosystem, finding security risks, explaining them to management and helping fix them. The engineer performs IoT penetration tests, pulling and reverse engineering firmware to find flaws, carries out threat modelling and broader testing across applications and platforms, writes up findings and their risk, triages and drives remediation of externally reported issues, selects and deploys security solutions for IoT infrastructure, and keeps security policies and procedures current.
Alarm.com wants ten or more years in information security centred on offensive work, IoT or embedded testing experience, familiarity with UART, I2C, SPI and JTAG, hardware debugging tools, embedded Linux and ARM, and tools such as IDA Pro, Ghidra or Binary Ninja. Based in Tysons, VA.