Senior Offensive Security Engineer (IOT / Network Pentesting)
Coinbase
Senior Offensive Security Engineer (IOT / Network Pentesting)
Job Description
Responsibilities
- Assess the digital security of physical spaces (e.g., labs, offices), including expertise in IOT/IOT automation and prosumer networking gear.
- Conduct comprehensive penetration tests on networked devices, including hardware, firmware, and integrations.
- Identify and exploit vulnerabilities in ecosystems, providing detailed reports and recommendations for remediation.
- Collaborate with security and development teams to integrate security best practices throughout the device lifecycle.
- Stay current with the latest security threats, vulnerabilities, and industry best practices for securing physical spaces.
- Present findings and recommendations to technical and non-technical stakeholders, including executive leadership.
Required Qualifications
- Active, current, or recently expired security clearance.
- 2+ years of experience working with C-Suite at S&P 500 organizations.
- Proven penetration testing expertise across the full threat spectrum, from common criminal actors up to highly sophisticated, resource-rich Advanced Persistent Threats (APTs) and nation-state actors.
- Proven expertise in penetration testing the full digital security of physical spaces, including building management systems (BMS), physical access control systems (PACS), IoT/home automation devices, wireless protocols (LoRaWAN, Bluetooth, Zigbee, etc) and networked security infrastructure (e.g., IP cameras and alarms).
- Extensive experience working with executives at large, complex organizations.
- Strong understanding of networking protocols and architectures, security frameworks, and building security best practices.
- Proficiency in various penetration testing tools and methodologies.
- Excellent communication and report-writing skills.
- Ability to travel occasionally, based on business needs.
Preferred Qualifications
- Participation in computer security competitions (CTFs), Bug Bounty programs, open source security research, CVE analysis
- Experience in Web3 security, network security and/or cloud security.
- Experience with developing and implementing security tooling to support penetration testing and AI penetration testing activities.
- Experience pentesting AI systems and LLMs.
Required Skills
- penetration testing expertise
- expertise in IOT/IOT automation
- prosumer networking gear
- networked devices testing (hardware, firmware, integrations)
- vulnerability identification and exploitation
- networking protocols and architectures
- security frameworks
- building security best practices
- penetration testing tools and methodologies
- communication and report-writing
- wireless protocols (LoRaWAN, Bluetooth, Zigbee)
- building management systems (BMS)
- physical access control systems (PACS)
- networked security infrastructure (IP cameras, alarms)
Benefits
- bonus eligibility
- equity eligibility
- benefits (including medical, dental, vision and 401(k))
Salary Range
$186065 - $218900 USD
Locations
- US Zone 1 (Job Requisitions Only), United States (Remote)
Salary
186,065 - 218,900 USD / yearly
Skills Required
- penetration testing expertiseintermediate
- expertise in IOT/IOT automationintermediate
- prosumer networking gearintermediate
- networked devices testing (hardware, firmware, integrations)intermediate
- vulnerability identification and exploitationintermediate
- networking protocols and architecturesintermediate
- security frameworksintermediate
- building security best practicesintermediate
- penetration testing tools and methodologiesintermediate
- communication and report-writingintermediate
- wireless protocols (LoRaWAN, Bluetooth, Zigbee)intermediate
- building management systems (BMS)intermediate
- physical access control systems (PACS)intermediate
- networked security infrastructure (IP cameras, alarms)intermediate
Required Qualifications
- Active, current, or recently expired security clearance. (experience)
- 2+ years of experience working with C-Suite at S&P 500 organizations. (experience)
- Proven penetration testing expertise across the full threat spectrum, from common criminal actors up to highly sophisticated, resource-rich Advanced Persistent Threats (APTs) and nation-state actors. (experience)
- Proven expertise in penetration testing the full digital security of physical spaces, including building management systems (BMS), physical access control systems (PACS), IoT/home automation devices, wireless protocols (LoRaWAN, Bluetooth, Zigbee, etc) and networked security infrastructure (e.g., IP cameras and alarms). (experience)
- Extensive experience working with executives at large, complex organizations. (experience)
- Strong understanding of networking protocols and architectures, security frameworks, and building security best practices. (experience)
- Proficiency in various penetration testing tools and methodologies. (experience)
- Excellent communication and report-writing skills. (experience)
- Ability to travel occasionally, based on business needs. (experience)
Preferred Qualifications
- Participation in computer security competitions (CTFs), Bug Bounty programs, open source security research, CVE analysis (experience)
- Experience in Web3 security, network security and/or cloud security. (experience)
- Experience with developing and implementing security tooling to support penetration testing and AI penetration testing activities. (experience)
- Experience pentesting AI systems and LLMs. (experience)
Responsibilities
- Assess the digital security of physical spaces (e.g., labs, offices), including expertise in IOT/IOT automation and prosumer networking gear.
- Conduct comprehensive penetration tests on networked devices, including hardware, firmware, and integrations.
- Identify and exploit vulnerabilities in ecosystems, providing detailed reports and recommendations for remediation.
- Collaborate with security and development teams to integrate security best practices throughout the device lifecycle.
- Stay current with the latest security threats, vulnerabilities, and industry best practices for securing physical spaces.
- Present findings and recommendations to technical and non-technical stakeholders, including executive leadership.
Benefits
- general: bonus eligibility
- general: equity eligibility
- general: benefits (including medical, dental, vision and 401(k))
Tags & Categories
Senior Offensive Security Engineer (IOT / Network Pentesting)
Coinbase
Senior Offensive Security Engineer (IOT / Network Pentesting)
Job Description
Responsibilities
- Assess the digital security of physical spaces (e.g., labs, offices), including expertise in IOT/IOT automation and prosumer networking gear.
- Conduct comprehensive penetration tests on networked devices, including hardware, firmware, and integrations.
- Identify and exploit vulnerabilities in ecosystems, providing detailed reports and recommendations for remediation.
- Collaborate with security and development teams to integrate security best practices throughout the device lifecycle.
- Stay current with the latest security threats, vulnerabilities, and industry best practices for securing physical spaces.
- Present findings and recommendations to technical and non-technical stakeholders, including executive leadership.
Required Qualifications
- Active, current, or recently expired security clearance.
- 2+ years of experience working with C-Suite at S&P 500 organizations.
- Proven penetration testing expertise across the full threat spectrum, from common criminal actors up to highly sophisticated, resource-rich Advanced Persistent Threats (APTs) and nation-state actors.
- Proven expertise in penetration testing the full digital security of physical spaces, including building management systems (BMS), physical access control systems (PACS), IoT/home automation devices, wireless protocols (LoRaWAN, Bluetooth, Zigbee, etc) and networked security infrastructure (e.g., IP cameras and alarms).
- Extensive experience working with executives at large, complex organizations.
- Strong understanding of networking protocols and architectures, security frameworks, and building security best practices.
- Proficiency in various penetration testing tools and methodologies.
- Excellent communication and report-writing skills.
- Ability to travel occasionally, based on business needs.
Preferred Qualifications
- Participation in computer security competitions (CTFs), Bug Bounty programs, open source security research, CVE analysis
- Experience in Web3 security, network security and/or cloud security.
- Experience with developing and implementing security tooling to support penetration testing and AI penetration testing activities.
- Experience pentesting AI systems and LLMs.
Required Skills
- penetration testing expertise
- expertise in IOT/IOT automation
- prosumer networking gear
- networked devices testing (hardware, firmware, integrations)
- vulnerability identification and exploitation
- networking protocols and architectures
- security frameworks
- building security best practices
- penetration testing tools and methodologies
- communication and report-writing
- wireless protocols (LoRaWAN, Bluetooth, Zigbee)
- building management systems (BMS)
- physical access control systems (PACS)
- networked security infrastructure (IP cameras, alarms)
Benefits
- bonus eligibility
- equity eligibility
- benefits (including medical, dental, vision and 401(k))
Salary Range
$186065 - $218900 USD
Locations
- US Zone 1 (Job Requisitions Only), United States (Remote)
Salary
186,065 - 218,900 USD / yearly
Skills Required
- penetration testing expertiseintermediate
- expertise in IOT/IOT automationintermediate
- prosumer networking gearintermediate
- networked devices testing (hardware, firmware, integrations)intermediate
- vulnerability identification and exploitationintermediate
- networking protocols and architecturesintermediate
- security frameworksintermediate
- building security best practicesintermediate
- penetration testing tools and methodologiesintermediate
- communication and report-writingintermediate
- wireless protocols (LoRaWAN, Bluetooth, Zigbee)intermediate
- building management systems (BMS)intermediate
- physical access control systems (PACS)intermediate
- networked security infrastructure (IP cameras, alarms)intermediate
Required Qualifications
- Active, current, or recently expired security clearance. (experience)
- 2+ years of experience working with C-Suite at S&P 500 organizations. (experience)
- Proven penetration testing expertise across the full threat spectrum, from common criminal actors up to highly sophisticated, resource-rich Advanced Persistent Threats (APTs) and nation-state actors. (experience)
- Proven expertise in penetration testing the full digital security of physical spaces, including building management systems (BMS), physical access control systems (PACS), IoT/home automation devices, wireless protocols (LoRaWAN, Bluetooth, Zigbee, etc) and networked security infrastructure (e.g., IP cameras and alarms). (experience)
- Extensive experience working with executives at large, complex organizations. (experience)
- Strong understanding of networking protocols and architectures, security frameworks, and building security best practices. (experience)
- Proficiency in various penetration testing tools and methodologies. (experience)
- Excellent communication and report-writing skills. (experience)
- Ability to travel occasionally, based on business needs. (experience)
Preferred Qualifications
- Participation in computer security competitions (CTFs), Bug Bounty programs, open source security research, CVE analysis (experience)
- Experience in Web3 security, network security and/or cloud security. (experience)
- Experience with developing and implementing security tooling to support penetration testing and AI penetration testing activities. (experience)
- Experience pentesting AI systems and LLMs. (experience)
Responsibilities
- Assess the digital security of physical spaces (e.g., labs, offices), including expertise in IOT/IOT automation and prosumer networking gear.
- Conduct comprehensive penetration tests on networked devices, including hardware, firmware, and integrations.
- Identify and exploit vulnerabilities in ecosystems, providing detailed reports and recommendations for remediation.
- Collaborate with security and development teams to integrate security best practices throughout the device lifecycle.
- Stay current with the latest security threats, vulnerabilities, and industry best practices for securing physical spaces.
- Present findings and recommendations to technical and non-technical stakeholders, including executive leadership.
Benefits
- general: bonus eligibility
- general: equity eligibility
- general: benefits (including medical, dental, vision and 401(k))
Tags & Categories