Senior Offensive Security Engineer - Embedded Systems

THE OPPORTUNITY

Silvus is seeking a Senior Offensive Security Engineer – Embedded Systems who will report to the Director of Software Engineering on the Software Engineering team. The successful individual in this role will focus on proactively identifying and exploiting vulnerabilities in embedded systems (hardware, firmware, and associated software) to improve overall security posture. This role utilizes techniques such as penetration testing, reverse engineering, and threat modeling to find weaknesses in system design and architecture. 

This position is based at Silvus Technologies’ headquarters in the heart of vibrant West Los Angeles, CA and is on a hybrid schedule; a minimum of 3 days onsite per week is expected. On-site days are Mondays, Wednesdays, and Thursdays.

The following is a list of at least some of the current essential job functions of the position. Management may assign or reassign duties and responsibilities at any time at its discretion.

 ROLE AND RESPONSIBILITIES

• Assess security posture of Silvus-built software, hardware and firmware as well as the third-party components used in our products.
• Provide expertise to other Silvus teams on real-world attack vectors and work with appropriate team members to implement and test mitigations.
• Plan for, build and maintain capabilities needed to execute red team projects.
• Perform other related duties of which the above are representative.

REQUIRED QUALIFICATIONS

• High School diploma or GED plus 3 years of experience in cybersecurity, with at least 1 year in an offensive security role (e.g., penetration testing, red teaming, vulnerability assessment).
• Broad experience assessing the security posture of everything from web applications to hardware and embedded systems.
• Demonstrated experience leading offensive security engagements.
• Experience with assessment of cloud based and containerized environments (AWS, Azure, Kubernetes).
• Proven experience assessing and improving the security of mobile devices (Android and/or iOS).
• Proficient with one or more programming languages (e.g. Rust, C/C++, Golang, Swift).
• Security Clearance: Active U.S. Government SECRET clearance or the ability to obtain one within 15 months of hire.
• Must be a U.S. Citizen due to clients under U.S. government contracts.
• All employment is contingent upon the successful clearance of a background check and drug test.

 PREFERRED KNOWLEDGE, SKILLS AND ABILITIES

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (e.g., Mathematics, Computer Engineering).
• Considerable experience building custom tooling to assist in offensive security activities.
• Experience weaponizing vulnerabilities to provide unique capabilities.
• Familiarity with security architectures of robot platforms (consumer or otherwise), aerospace, and physical systems.
• In-depth experience developing features for and improving security of mobile applications, networks, or embedded systems.
• Strong familiarity with mobile device exploitation techniques.
• Broad familiarity with anti-tamper and reverse engineering mechanisms.
• Regularly build, test, and deliver production-ready systems, especially for embedded and/or mobile.
• Strong professional communication skills (written and verbal).

WORKING CONDITIONS & PHYSICAL REQUIREMENTS

• Office environment.
• While performing the duties of this job, the employee is required to do the following:
  • Lift equipment up to 20 lbs. for the set-up of demonstrations or testing.
  • Perform bending and reaching movements to place items on lower and higher shelves.
  • Kneeling or squatting to access lower shelves.
  • Walking/Moving in the labs.