Attack & Penetration Hardware Hacker Manager

JOB DESCRIPTION

You Belong Here

The Protiviti Career provides opportunity to learn, inspire, and advance within a collaborative and inclusive culture. We hire curious individuals for whom learning is a passion. We lean into our mission : We Care. We Collaborate. We Deliver.

At every level, we champion leaders who live our values of integrity, inclusion, innovation, and commitment to success . Imagining our work as a journey, we believe integrity guides our way, inclusion moves us forward together, innovation creates new destinations, and our commitment to success empowers us to deliver on our vision to be the most trusted global consulting firm.

Where We Need You

Protiviti is looking for anAttack & Penetration Manager to join our growing Security & Privacy team.

What You Can Expect

As a Manager, you’ll partner with our clients to solve complex business problems and provide impactful advice and solutions. You’ll develop lasting relationships with client personnel and further these relationships through quality product delivery. You’ll foster a network within the business community and serve as an ambassador of Protiviti in the market. You will also be a mentor, trainer, and coach to Consultants and Senior Consultants as you facilitate the successful completion of project work plans.

You will help execute penetration tests on a range of application and hardware platforms, such as large complex medical devices, network / telecom equipment, vehicle systems, and consumer electronics devices. You will have access to a robust set of testing tools and equipment that has been built / developed to tackle hundreds of different hardware penetration tests. You will have opportunities to develop new tooling, design novel attacks, and help secure devices that could help save lives. Additionally, if you have ideas for new security services and demand for those services can be identified, we can help support that service’s development. We also encourage presenting at local, national, or international security conferences. Help shape the future product security.

What Will Help You Be Successful

You enjoy the intricacies of embedded systems / hardware and the firmware / software ecosystems they integrate with.

You enjoy discussing technical and industry trends and seek opportunities to demonstrate and teach staff on the job.

You are passionate about delivering client satisfaction and demonstrating a growing level of industry and product competency and are able to articulate their value to your clients.

You seek opportunities to interact with and mentor personnel, including participating in the creation and rollout of training and developing skill sets.

You understand the business environment and potential client base for the solution and industry.

Do Your Talents Include the Following?

Demonstrated experience with :

ARM / FPGA / MIPS / etc., (embedded microprocessors)

Embedded Linux / RTOS

other embedded Oss

Familiarity with JTAG / SPI / other-bus-communication / On-chip Debuggers.

Knowledge of Bluetooth Low Energy, RF, RFID, Software Defined Radio (SDR), Secure Source Code Review.

Experience performing Application Security Assessment work (threat modeling, design reviews, vulnerability, & penetration tests).

Experience with Reverse Engineering hardware and / or software.

Mobile application penetration testing on iOS and Android

API penetration testing

Web application penetration testing

Demonstrated knowledge of coding standings and security requirements (NIST, ISO, OWASP, SEI CERT, MS Secure Coding Standards).

Strong programming skills (Linux, Java, .NET, C / C++, Assembly, etc.) desired but not required.

Experience investigating possible attack scenarios by interpreting code review findings, attack paths, and providing analysis of results.

Ability to identify, describe, and report vulnerabilities and standard remediation activities, to include clear demonstration of risk to clients through post-exploitation activities.

Familiarity with security-related topics such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methods, and data storage.

Experience developing innovative solutions to address security weaknesses.

Facilitation of improvements on methodologies, toolsets, and offerings through independent or collaborative development work.

Ability to work with a diverse portfolio of clients across industries.

Tracking and reporting compliance to product security requirements throughout software or hardware development lifecycle.

Your Educational and Professional Qualifications

Bachelor’s degree in a relevant discipline (e.g., MIS, CIS, EE, IT, IS, CE, CS, etc.).

5+ years working in professional services or industry.

Proficiency in Microsoft Office suite applications with specific emphasis on Word, Excel and PowerPoint. Secondary emphasis on Visio and Access.

Certifications such as OSCP, OSCE, GIAC, CISSP, SANS 600 or 700 level course work are strongly preferred

Our Hybrid Workplace

Protiviti practices a hybrid model, which is a combination of working in person with a purpose and working remotely. This model creates meaningful experiences for our people and our clients while offering a flexible environment. The ratio of remote to in-person requirements vary by client, project, team, and other business factors. Our people work both in-person in local Protiviti offices and on client sites, which can include local or out-of-state travel based on our projects and client requests and commitments.

#LI-Hybrid

Protiviti is not registered to hire or employ personnel in the following states – West Virginia, Alaska.

Starting salary is based on a full-time equivalent schedule. Placement in the range is dependent upon experience, skills and geographic work location. Below is the salary range for this job.

$129,000.00 - $205,000.00

Our annual bonus plan provides eligible employees additional cash and / or discretionary stock compensation opportunities. Below is the bonus target opportunity for this job.

12%

The total cash range is estimated from the sum of the base salary range plus the bonus target opportunity. Below is the estimated total cash range for this job.

$144,480.00 - $229,600.00

Employees are eligible for medical, dental, and vision coverages, FSA and HSA healthcare accounts, life and accident insurance, adoption and fertility assistance, paid parental leave up to 10 weeks, and short / long term disability. We offer eligible employees a company 401(k) savings and investment plan with an employer match of 50% on the first 6% of your contributions. We provide Choice Time Off (CTO) for vacation, personal needs, and sick time. The amount of (CTO) varies based on years of service. New hires receive up to 20 days of CTO per calendar year. Protiviti also recognizes up to 11 paid holidays each calendar year.

Learn more about the variety of rewards we offer at Protiviti at .

Any benefits outlined are part of our reward offerings for full-time employees in the U.S. Your Open Enrollment materials, insurance contracts, plan documents and Summary Plan Descriptions together comprise the official plan document which legally governs the administration of your benefit plans. Protiviti reserves the right to terminate or amend your benefit plans in any way and at any time.