> Markdown version of [/jobs/ext/2813020-senior-embedded-security-consultant-cheltenham](https://www.wearedevelopers.com/jobs/ext/2813020-senior-embedded-security-consultant-cheltenham). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Embedded Security Consultant - Cheltenham - **Company:** IOActive Inc. - **Location:** Cheltenham, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** C (Programming Language), Java (Programming Language), Android Software Development, Software System Penetration Testing, Assembly Language, Bluetooth, Code Review, Information Leak Prevention, Data Security, Software Debugging, Linux, Firmware, FreeRTOS, Identity and Access Management, Joint Test Action (IEEE Standards), Linux Kernel, Role-Based Access Control, Reverse Engineering, Wi-Fi Technology, 64bit, Selinux, U-Boot, Vulnerability Analysis - **Published:** September 10, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840577851-senior-embedded-security-consultant-cheltenham ## About the Role * Rapid identification of attack surfaces and entry points using implicit threat modeling techniques * Ability to connect and use JTAG/on-chip Debuggers * Low-level C code review * FreeRTOS, Android, Linux kernel drivers, protocol parsing * Sandbox policy review: SELinux/SE Android, seccomp, Linux name spaces, Minijail/Firejail * Crypto implementation code reviews, specifically for secure boot and code signing * Java, especially Android app side * ARM 32- and 64-bit assembly * Extensive Git/GitHub experience * Wi-Fi/Bluetooth * Reverse engineering, specifically firmware * Hardware/embedded system hacking * Vulnerability assessment and penetration testing * Knowledge of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, secure data storage, * Ability to work independently under deadline * Rigorous attention to detail and strong analytic skills * Ability to write test plans based upon initial impressions and discussions with the team * Comfortable navigating large codebases with minimal guidance * Excellent command of written and spoken English * Comfortable working as part of a multinational and multidisciplinary team * Logical and structured approach to projects * 3-5 years or more of relevant work experience in a high-paced, enterprise consulting environment ## Description Embedded Device Security Consultants are responsible for performing high-end security evaluations and research for our clients, focused on a range of embedded devices. In this role, you will work with other team members to deliver high-quality results to IOActive's clients throughout the world. Our consultants maintain a high level of expertise regarding known threats and technical advances in embedded security. This position requires expert knowledge in areas such as C, Java, assembly languages, open platforms, and cryptography. The Embedded Device Security Consultant will undertake advanced level security evaluation tasks and duties in order to meet customer requirements and project deadlines. What You'll Do * Investigate possible logical attack scenarios by interpreting the code review findings, orienting the attack paths, and analyzing the test results * Develop sophisticated, state-of-the-art attacks that integrate the latest attack methods against embedded products * Create tools to assist in project goals * Communicate complex vulnerabilities to both technical and non-technical client staff * Perform research on new attack vectors, discover new vulnerabilities, create new exploitation techniques * Evangelize IOActive Labs through blogs, white papers, presentations, etc. * Support business development efforts through the scoping of engagements ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)