Senior Penetration Tester, Embedded Security - Tiro Security, LLC : Job Details

Job Reference: 6067

Our Client seeks a security professional with experience in penetration testing embedded systems (IoT) and secure development practices. In this role, you'll contribute to product security assessments, threat modeling, incident response, and secure SDLC integration to be based in Orange County, CA.

This is an onsite position (hybrid is possible) for US Citizens and Green Card holders. If you need visa sponsorship now or in the future, you are not eligible for the position.

The Client is open to people who will permanently relocate to the area.

This is a unique opportunity to join a well-established, rapidly expanding firm with great promotion opportunities.

Responsibilities:

• Conduct security testing and assessments on embedded code.
• Support incident response and vulnerability management.
• Collaborate with cross-functional teams on security certifications and remediation efforts.
• Contribute to internal security tooling and automation.
• Help align development practices with global security standards and regulations.

Requirements:

• 1–3 years of hands-on experience in embedded security or a related field.
• Familiarity with common penetration testing tools and techniques such as Burp Suite, as well as reverse engineering.
• Working knowledge of embedded systems, protocol security design, cryptography, security frameworks, and common vulnerabilities.
• Proficiency in at least one scripting or programming language (e.g., C/C++, Python, Bash).
• Strong communication skills and a team-oriented mindset.

Salary dependent on experience: $110K to $170K.

Tiro Security is a specialist in Cyber Security staffing and professional services company. Formed in 2012, headquartered on the West Coast and helping clients all over the USA, Cyber Security is ALL we do. Tiro Security is extremely active in the cybersecurity industry and regularly speaks as experts on staffing, careers, and retaining talent at major conferences including DEFCON, ISC2 Congress, ShellCon, BSides, and RSA.