> Markdown version of [/jobs/ext/2102778-embedded-device-security-consultant-cheltenham](https://www.wearedevelopers.com/jobs/ext/2102778-embedded-device-security-consultant-cheltenham). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Embedded Device Security Consultant - Cheltenham

- **Company:** IOActive Inc.
- **Location:** Austrey, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** C (Programming Language), Java (Programming Language), Android Software Development, Software System Penetration Testing, Assembly Language, Bluetooth, Code Review, Cyber Security, Information Leak Prevention, Data Security, Software Debugging, Firmware, Identity and Access Management, Joint Test Action (IEEE Standards), Role-Based Access Control, Reverse Engineering, Wi-Fi Technology, 64bit, U-Boot, Vulnerability Analysis
- **Published:** August 18, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/43208794/

## About the Role

operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with global operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK. This is not a Remote position. This position is expected to report for work at our security lab in Cheltenham, United Kingdom. Who you are Our Embedded Device Security consultants maintain a high level of expertise regarding threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography. Intellectual curiosity, the ability to navigate ambiguous environments and a bias to action are critical competencies required for success. What you'll do Perform high-end security evaluations and research for our clients, focused on a range of embedded devices Work with other team members to deliver high-quality results to IOActive's clients throughout the world Investigate possible
logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results Develop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded products Create tools to assist in project goals Communicate complex vulnerabilities to both technical and non-technical client staff Evangelize IOActive Labs through blogs, white papers, presentations, etc. Support business development efforts through the scoping of engagements What you bring Required Technical Skills Rapid identification of attack surfaces and entry points using implicit threat modeling techniques Ability to connect and use JTAG/on-chip Debuggers Low-level C code review Crypto implementation code reviews, specifically for secure boot and code signing Java, especially Android app side ARM 32- and 64-bit assembly Wi-Fi/Bluetooth Reverse engineering, specifically firmware Hardware/embedded system hacking Vulnerability assessment and penetration
testing Knowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage Consulting Skills + Experience Ability to work independently under deadline Rigorous attention to detail and strong analytic skills Ability to write test plans based upon initial impressions and discussions with the team Comfortable navigating large codebases with minimal guidance Excellent command of written and spoken English Comfortable working as part of a multinational and multidisciplinary team Logical and structured approach to projects 3-5 years or more of relevant work experience in a high-paced, enterprise consulting environment What We Offer A chance to work with an industry leader in cyber security Access to world-class technical teams and research A

## Description

Embedded Device Security Consultant - Cheltenham "Making the world a safer and more secure place." It's our mission, plain and simple. It drives everything we do - from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn't just "push the envelope" or "think outside the box." We shred the envelope, crush the box, and we have fun doing it. We are always looking for people who share our mission to join us. About IOActive IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting-edge cybersecurity teams provide highly specialized technical and programmatic services including full-stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker's perspective to every engagement to maximize cybersecurity investments and improve the security posture and


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [When Agents Meet Legacy: Never Change a Running System](https://www.wearedevelopers.com/videos/100320-when-agents-meet-legacy-never-change-a-running-system)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)