Software Developer designing, testing, and maintaining secure applications for Multiview, an ERP and financial software company. Collaborating across teams and using AI coding agents to improve client - focused products.
About the role
- Senior penetration-testing engineer assessing connected devices, embedded systems, and industrial platforms. Delivering actionable vulnerability findings for Finite State’s firmware-risk platform.
Responsibilities
- Plan and execute penetration tests against IoT, ICS/OT, and automotive targets
- Own engagements autonomously, including scoping, attack-surface prioritization, testing, evidence collection, reporting, and debriefing
- Use Finite State's firmware analysis platform alongside hands-on testing to identify genuinely reachable and exploitable vulnerabilities
- Perform hardware interaction and firmware extraction using JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash dumping
- Solder and rework PCBs to access debug interfaces
- Conduct firmware reverse engineering with Ghidra and Binary Ninja
- Assess wireless protocols, vehicle buses, industrial control protocols, network protocols, cloud and mobile companion apps, and APIs
- Perform source code review in C, C++, and related embedded languages
- Review third-party and open-source components through SBOM review and software composition analysis
- Leverage approved AI-powered security tooling and LLM-assisted workflows while honoring customer data-handling and NDA constraints
- Evaluate products for relevant regulatory and standards compliance
- Produce technical reports with findings, risk ratings, remediation guidance, CVSS scores, exploitability prioritization, and VEX justifications
- Participate in peer review of engagement deliverables
- Support customer-facing scoping calls, technical debriefs, and remediation follow-up
- Collaborate with product, engineering, and research teams to improve the Finite State platform
- Contribute to knowledge sharing, tooling development, and methodology improvement
- Participate in conferences, publish research, and represent Finite State externally
Requirements
- Bachelor's degree in Computer Science, Electrical Engineering, Computer Engineering, or a related field, or equivalent hands-on experience
- 7+ years of hands-on experience in IoT, embedded, ICS/OT, or automotive security
- Track record of owning engagements autonomously at a senior level
- Hands-on depth in at least one target domain: IoT/embedded, ICS/OT, or automotive; working familiarity with the other two
- Experience with hardware-level security assessments, including JTAG/SWD debugging, SPI/I2C/UART communication, and flash memory extraction
- Comfort soldering and reworking PCBs to reach debug interfaces
- Proficiency with Ghidra and/or Binary Ninja
- Ability to analyze ARM, MIPS, PPC, RISC-V, x86, and x64 architectures
- Experience testing wireless protocols including BLE, Zigbee, Z-Wave, Wi-Fi, and cellular
- Experience with vehicle buses or industrial control protocols including CAN, LIN, automotive Ethernet, Modbus, DNP3, EtherNet/IP, and OPC-UA
- Working familiarity with standard network protocols and web/mobile application testing methodology
- Ability to read and review C and C++ source code
- Familiarity with SBOM concepts and formats including CycloneDX and SPDX
- Working fluency with CVSS scoring and VEX
- Ability to map findings to at least one relevant regulatory or standards framework
- Excellent written and verbal communication skills
- Experience with Python and Bash scripting and automation
- Familiarity with AI-assisted security tooling and LLM-based workflows
- Must be authorized to work in the U.S. without sponsorship
- Some engagements may be restricted to U.S. persons under ITAR/EAR rules
- Preferred qualifications include automotive security, ICS/SCADA security, CVE or responsible disclosure history, OSCP/OSWE or SANS/GIAC certifications, regulatory knowledge, static/dynamic analysis, ML-based vulnerability detection, AWS, and consulting/product security experience
Benefits
- Fully distributed workforce and remote-first culture
- Remote work; no relocation required
- Limited travel, including occasional trips for customer-site assessments, conferences, and team gatherings
- Finite State ships and funds a bench lab, including soldering and rework station, probes, programmers, logic analyzer, and radios
- Opportunities to expand scope into platform integrations, direct account ownership, and business-driving tools
- Opportunities for industry conference participation, research publication, and external representation
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
AI Product Engineer building production agents, MCP integrations, and developer tools for ClickHouse’s open - source ClickStack observability platform. Improving incident investigation, telemetry analysis, and agent reliability.
Senior Software Developer delivering compliant multi - region applications and AWS infrastructure. Supporting MaintainX’s mobile - first work - execution platform for industrial and frontline teams.
Senior Software Engineer building Dentrix Ascend, Henry Schein One’s cloud - based dental practice management platform. Developing scalable Java services and improving reliability for US dental practices.
Fullstack developer building web applications, Cloud Native services, and back - end integrations at Mirego. Contributing to architecture, DevOps, AI - assisted development, and client solutions.
Senior CXE Engineer building Amazon Connect, Bedrock, and serverless contact - center solutions for Caylent. Delivering AI agents, migrations, analytics, and customer - facing implementations.
Principal Software Engineer shaping Snout’s veterinary wellness platform, payments, and data systems. Leading architecture, full - stack development, DevOps, and cross - team engineering initiatives.
Senior Software Engineer building Snout’s veterinary wellness platform for clinics and pet owners. Developing full - stack features and operating reliable SaaS infrastructure.
Staff Software Engineer defining architecture and shipping AI - powered products at Senpilot. Building intelligent systems that help utilities improve grid safety, resilience, and efficiency.
.NET Full Stack Developer building applications with .NET, Angular, SQL Server, and Web APIs. Managing integrations, production incidents, and client queries for a Canadian role.