Product Security Engineer​/Penetration Tester​/ Hardware Engineer

Immediate need for a talented Product Security Engineer/Penetration Tester/ Hardware Engineer. This is a 06 months contract opportunity with long-term potential and is located in Duluth, Georgia (Onsite).

Job
-20582

Pay Range: $60 - $70/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

• Perform security assessments and penetration testing of embedded, IoT, and industrial automation products.
• Conduct hardware, firmware, wireless (Wi-Fi/Bluetooth), application, API, and network penetration testing.
• Identify security vulnerabilities and provide actionable remediation recommendations.
• Mentor junior security engineers and provide technical guidance to the Product Security Assurance team.
• Develop and improve repeatable security testing methodologies and automation processes.
• Collaborate with engineering and product teams to integrate security throughout the Secure Development Lifecycle (SDLC).
• Perform threat modeling and security architecture reviews.
• Utilize static, dynamic, software composition, and binary analysis tools to identify security weaknesses.
• Partner with tooling teams to evaluate, implement, and automate security testing solutions.
• Document findings and communicate security risks using standardized reporting processes.
• Stay current with emerging threats, attack techniques, and penetration testing methodologies.

• Bachelor's degree in Computer Science, Software Engineering, Electrical Engineering, or equivalent practical experience.
• 8 years of cybersecurity experience.
• Minimum 5 years of hands-on penetration testing experience.
• Strong experience with:
• Hardware Penetration Testing
• Firmware Penetration Testing
• RF Security Testing (Wi-Fi & Bluetooth)
• Secure Development Life Cycle (SDLC)
• Threat Modeling
• Software Composition Analysis (SCA)
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Binary Analysis
• Experience identifying and validating security vulnerabilities across embedded and IoT environments.
• Strong understanding of application protocols, software development, and common attack vectors.
• Excellent written and verbal communication skills.
• Experience performing penetration testing for Industrial Control Systems (ICS).
• Hands-on experience testing:
• Web Applications
• Mobile Applications
• Thick Client Applications
• APIs and Web Services
• Cloud Platforms
• Containers
• Embedded Hardware
• Experience with reverse engineering, firmware analysis, debuggers, and dynamic analysis tools.
• Ability to script custom exploits and automate security testing.
• Experience with fuzz testing applications and communication protocols.
• Strong understanding of secure architecture and security-by-design principles.
• Experience integrating penetration testing tools into CI/CD pipelines.
• Relevant security certifications such as:
• OSCP
• OSWE
• CEH
• GPEN
• GWAPT
• CISSP (preferred)

Our client is a leading Electronics Industry and we are currently interviewing to fill this and other similar contract positions.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.