Red Team Software Security Engineer

Job Title : Red Team Software Security Engineer

We are seeking an Red Team Software Security Engineer someone who will be analyzing embedded system security, developing tools and proof-of-concept exploits and reverse engineering software from bootloaders to userland applications.

• Client (type/ industry) : IT solutions branch of a major Japanese company

• Working Location: Plano, TX (Hybrid) 

• Employment Type : Contract (Contract: 6 months with possible extension.)

• Pay : Up to $67/hr

Job Description:

Embedded within the Product Cybersecurity Group (PCG), the Product Security Testing Team (PSTT) performs advanced security testing engagements for pre-production automotive solutions worldwide.

In this role, you will be analyzing embedded system security, developing tools and proof-of-concept exploits and reverse engineering software from bootloaders to userland applications. We are looking for candidates who are passionate about system security and understand the landscape of software security defenses and features.

Essential Duties or Duties:

As an engineer on the Product Cybersecurity Operations Team supporting Industry, Governance, and Compliance capabilities in the Product Cybersecurity Group you will be responsible for:

• Perform analysis of security requirements specifications against implementation
• Execute penetration testing and reverse engineering of software and firmware
• Communicate complex technical findings, remediation guidance and recommendations
• Develop skills through research on new attack vectors, vulnerabilities, and exploits

Other Duties:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Requirement and Skills:

• Bachelor’s degree (or higher) in Computer Engineering, Computer Science, Cybersecurity or related is strongly desired
• Proficient in C, C++, ARM and/or Python (specifically for writing tools to help tasks)
• Knowledge of core, fundamental security concepts (e.g., cryptography, encryption)
• Knowledge of embedded security features and best practices (e.g., Secure Boot)
• Experience with Linux and other embedded operating systems
• Experience with reverse engineering and binary analysis tools (e.g., IDA Pro, Ghidra)
• Experience evaluating system security based on standard controls (e.g., SELinux)
• Experience with identifying software security issues and vulnerabilities

Additional Informations:

• Knowledge of software fuzzing techniques and solutions (e.g., BAP, AFL)
• Knowledge of symbolic execution and other advanced binary analyses (e.g. angr)
• Experience with vulnerability analysis using CVSS scoring and CWE types
• Experience in penetration testing and requirements verification
• Experience in performing code audit or assessments