Staff Security Engineer

The posting, as Alarm.com wrote it

The Staff Security Engineer will identify security risks within our IoT device ecosystem, communicate those risks to management, and assist with the mitigation efforts. This role requires hands-on experience with reverse engineering, networking, operating systems, and programming. The ideal engineer will bring these skills to bear on complex IoT security challenges. The Senior Security Engineer will also document security policies and procedures and ensure they remain up to date with applicable industry standards and compliance requirements.

Responsibilities

The Staff Security Engineer primary job responsibilities include

• Perform IoT penetration testing, including firmware extraction, reverse engineering, and vulnerability discovery
• Perform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systems
• Use a combination of manual and automated techniques to assess risks and circumvent security mechanisms of devices and application
• Oversee and manage the deployment, integration, and configuration of security solutions and enhancements to existing IoT infrastructure and the enterprise’s security documents
• Select and acquire additional security solutions or enhancements to existing security solutions to improve overall IoT enterprise security
• Clearly outline and document risk impacts of test findings in reports
• Test, triage, and drive remediation of security issues reported by external parties
• Actively partner with infrastructure, application, product, and other stakeholders to ensure deployed solutions minimize security and privacy risks
• Other duties as assigned

REQUIREMENTS

• B.A. or B.S. (or higher) in Computer Science, Electrical Engineering, or a related engineering program with strong academic performance preferred
• 10+ years of information security experience, with a strong focus on offensive security, penetration testing, or vulnerability research
• Prior experience performing security testing and assessment in IoT, embedded, or firmware based environments
• Working knowledge of embedded system design and constraints (development experience a plus, but not required)
• Familiarity with using hardware debugging equipment such as oscilloscopes, logic analyzer and other tools
• Familiarity with interface protocols such as UART, I 2 C, SPI, JTAG, and related tooling.
• Experience analyzing embedded Linux systems and firmware images.
• Familiarity with ARM CPU architectures with exposure to x86, RISC-V, or others as a plus
• Experience with reverse-engineering tools such as IDA Pro, Ghidra, and/or Binary Ninja
• Certification in one or more Information Security disciplines is preferred or ability to obtain certifications.
• Self-starter, analytical, tenacious problem solver
• Strong verbal and written communication skills for a highly collaborative environment
• Rigo

[…]
ion"). The categories of Personal Information that we may collect include your name, government-issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, criminal record, and demographic information. We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future positions, recordkeeping in relation to recruiting and hiring, conducting criminal background checks as permitted by law, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies. By submitting your application, you acknowledge that we may retain some of the personal data that you provide in your application for our internal operations such as managing our recruitment system and ensuring that we comply with labor laws and regulations even after we have made our employment decision.

Notice To Third Party Agencies

Alarm.com understands the value of professional recruiting services. However, we are not accepting resumes from recruiters or employment agencies for this position. In the event we receive a resume or candidate referral for this position from a third-party recruiter or agency without a previously signed agreement, we reserve the right to pursue and hire those candidate(s) without any financial obligation to you. If you are interested in working with Alarm.com , please email your company information and standard agreement to RecruitingPartnerships@Alarm.com.
The base salary range of this opportunity is listed below and is determined within a range based on factors including qualifications, location and experience. This allows opportunity for growth and development within the role. The base salary offered is part of a total compensation package.

Base Salary Range
$167,500 — $180,500 USD