While your primary background is in software and security, you are passionate about holistic security and understanding the fundamental problems that our customers face.
This is a remote role in the USA.
Job Responsibilities:
Your responsibilities include threat modeling, code review, penetration testing, technical writing, and interfacing with customers from time to time.
Job Qualifications:
- Bachelor’s degree or international equivalent is required.
- A technical degree is ideal, although not required.
- In-depth and applied knowledge of hardware analysis, along with working proficiency in at least 2 of the following: network penetration testing, application penetration testing, cloud security assessment, code review.
- 2-4+ years of experience in the security industry.
- Familiarity with hardware debug interfaces (e.g., JTAG, SWD).
- Experience performing firmware or binary analysis on at least one of the following architectures: ARM (AArch64 and Cortex-M), x86/x86-64, MIPS, RISC-V, PowerPC, or Xtensa. Familiarity with additional embedded architectures (8051, AVR, ARC, TriCore, etc) is a plus.
- Familiarity with common firmware and platform security mechanisms such as secure boot, Trusted Execution Environments, System Management Mode, measured boot and TPM-based attestation, hardware root of trust, secure update with anti-rollback, and fuse or debug port lockdown.
- Hands-on development experience in one or more of firmware, software, or hardware: you have written embedded firmware, built software applications, or worked with hardware designs and schematics, and understand the security fundamentals.
- Successful track record of delivering quality results in complex projects – you will assess a variety of technologies, often requiring quite a bit of ramp.
- Python, Java, C, C++, or C# experience – having a deep level of knowledge of one or more of these languages will be beneficial to understanding new technologies.
- Strong written and verbal communication skills – you will be documenting your practices, observations, and recommendations.
- Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) – you will be leveraging industry standard tools such as BURP, Nmap, netcat, and others to perform network analysis.
Skills Required
- Bachelor’s degree or international equivalent
- Technical degree
- In-depth applied knowledge of hardware analysis
- Working proficiency in at least two of network penetration testing, application penetration testing, cloud security assessment, or code review
- 2–4+ years of experience in the security industry
- Familiarity with hardware debug interfaces such as JTAG and SWD
- Firmware or binary analysis experience on at least one listed architecture
- Familiarity with embedded architectures including 8051, AVR, ARC, or TriCore
- Familiarity with secure boot, Trusted Execution Environments, measured boot, TPM attestation, hardware roots of trust, secure updates, anti-rollback, and debug port lockdown
- Hands-on development experience in firmware, software, or hardware
- Track record of delivering quality results on complex projects
- Experience with Python, Java, C, C++, or C#
- Strong written and verbal communication skills
- Knowledge of network and web protocols, including TCP/IP, UDP, IPsec, HTTP, HTTPS, or routing protocols
What We Do
K2 Integrity is the preeminent risk, compliance, investigations, and monitoring firm—built by industry leaders, driven by interdisciplinary teams, and supported by cutting-edge technology to safeguard our clients’ operations, reputations, and economic security. K2 Integrity represents the merger of K2 Intelligence, an industry-leading investigative, compliance, and cyber defense services firm founded in 2009 by Jeremy M. Kroll and Jules B. Kroll, the originator of the modern corporate investigations industry, and Financial Integrity Network (FIN), a premier strategic advisory firm founded by Juan Zarate and Chip Poncy dedicated to helping clients achieve their financial integrity goals. K2 Integrity leverages unmatched multidisciplinary experience to develop cutting-edge solutions, stimulate business opportunities, and shape global economic security in a complex world. Whether it’s protecting clients’ assets or navigating the complex financial regulatory landscape to help clients identify, manage, and mitigate risk, K2 Integrity is an advisor trusted to meet and exceed clients’ goals in a rapidly changing world. To learn more about how K2 Integrity is revolutionizing the management of risk, visit our website, www.k2integrity.com.
