We are looking for talented, fast learners to work on vulnerability research and exploitation in embedded and IoT environments. This role is ideal for researchers with strong low-level backgrounds who want to deepen their expertise in IoT and embedded systems security while working on real-world, complex technologies
You will analyze proprietary software and hardware, apply a deep understanding of low-level systems, and take your research from initial discovery to a full end-to-end solution in production.
Requirements- 5+ years of experience as a security researcher or industry-equivalent experience.
- Understanding of memory corruption (Stack/Heap, UAF) and logical vulnerabilities (Injection, Logic/Design flaws, TOCTOU).
- Understanding of common security mitigations such as ASLR, DEP, and CFI.
- Expertise in OS internals, file systems, network protocols and cryptography concepts.
- Hands-on experience with reverse engineering and debugging tools such as IDA Pro or Ghidra, and GDB.
- Proficient in Assembly, C, and Python.
- B.Sc. or M.Sc. in Computer Science, Mathematics, or Engineering.
- Published research (CVEs, blog posts, or talks).
- Experience with RF communication schemes such as WiFi, Bluetooth, GPS…
- Experience with developing / researching in Android / iOS environments.
Skills Required
- 5+ years of experience as a security researcher or equivalent industry experience
- Understanding of memory corruption vulnerabilities, including stack and heap issues and use-after-free
- Understanding of logical vulnerabilities, including injection, logic or design flaws, and TOCTOU
- Understanding of security mitigations including ASLR, DEP, and CFI
- Expertise in operating system internals, filesystems, network protocols, and cryptography concepts
- Hands-on experience with IDA Pro or Ghidra and GDB
- Proficiency in Assembly, C, and Python
- B.Sc. or M.Sc. in Computer Science, Mathematics, or Engineering
- Published research such as CVEs, blog posts, or talks
- Experience with RF communication schemes such as WiFi, Bluetooth, or GPS
- Experience developing or researching in Android or iOS environments
What We Do
Toka develops lawful intelligence-gathering and cyber-defense technologies for trusted government, law-enforcement, and security agencies. Its software platforms provide scalable, user-friendly operational control for investigations and security operations, helping agencies counter terrorism and crime, protect citizens, and maintain a technological edge. Toka also advises governments on building integrated cyber defenses and offers intelligence and force-protection capabilities across complex national-security environments.
