F

Senior Engineer - Penetration Testing

finite state • United States
Full Remote
Apply Now

Finite State is seeking an experienced Senior Penetration Testing Engineer to conduct hands-on hardware and software security assessments of connected devices, embedded systems, ICS/OT, and automotive platforms. The role involves planning and executing autonomous engagements including firmware reverse engineering, hardware interaction, wireless protocol testing, source code review, and producing actionable reports with risk ratings and remediation guidance. Candidates must have deep hardware/firmware expertise, proficiency with tools like Ghidra and Binary Ninja, and authorization to work in the United States without sponsorship.

Key Highlights
Conduct penetration tests against IoT, ICS/OT, and automotive targets autonomously
Perform hardware interaction and firmware extraction via JTAG, UART, SPI, NAND/NOR flash dumping, and PCB soldering/rework
Reverse engineer firmware using Ghidra and Binary Ninja; assess wireless protocols (BLE, Zigbee, Wi-Fi, cellular) and vehicle buses (CAN, LIN, automotive Ethernet)
Evaluate compliance with relevant regulations and produce high-quality reports scored on CVSS
Leverage Finite State's firmware analysis platform and AI-powered tooling to accelerate analysis
Key Responsibilities
Plan and execute penetration tests against IoT, ICS/OT, and automotive targets
Own engagements autonomously including scoping, prioritizing attack surfaces, testing, evidence, reporting, and debrief
Perform hardware interaction and firmware extraction using techniques such as JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash dumping
Conduct firmware reverse engineering using Ghidra and Binary Ninja to identify vulnerabilities
Assess wireless protocols (Bluetooth/BLE, Zigbee, Z-Wave, Wi-Fi, LTE/5G) and automotive/industrial protocols (CAN, LIN, Modbus, DNP3, EtherNet/IP, OPC-UA)
Perform source code review in C/C++ and SBOM review for known vulnerabilities
Produce high-quality written reports with risk ratings and remediation guidance
Technical Skills Required
Penetration Testing Firmware Reverse Engineering Hardware Security Testing
Benefits & Perks
Fully distributed remote-first culture
Company funds and ships bench lab equipment (soldering station, probes, programmers, logic analyzer, radios)
Limited travel for customer-site assessments, conferences, and team gatherings

Job Description

Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.

Want the full job description? Read the complete details on Greenhouse, the original posting.
Continue on Greenhouse

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources
Keep exploring

Similar Jobs

Explore other opportunities that match your interests

Remote Work Guides

Practical guides for finding and thriving in remote roles.

Browse all articles

Subscribe to our newsletter

New visa sponsorship, relocation and remote tech jobs, delivered to your inbox.