> Markdown version of [/jobs/ext/3080518-hardware-security-and-vulnerability-analyst-hybrid-office-remote](https://www.wearedevelopers.com/jobs/ext/3080518-hardware-security-and-vulnerability-analyst-hybrid-office-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Hardware Security and Vulnerability Analyst - Hybrid (Office/Remote) - **Company:** EndoSec LLC - **Location:** Lafayette, IN, United States (Remote available) - **Contract:** Permanent contract - **Skills:** C++ (Programming Language), Software Debugging, Embedded Software, Firmware, Field-Programmable Gate Array (FPGA), Hardware Security Module, Systems Analysis, Python (Programming Language), Microsoft Office, Reverse Engineering, IDA Pro - **Published:** September 25, 2026 - **Apply:** https://www.juju.com/job/16_49d25e8c7 ## About the Role * Preferred Skills: C/C++, Python, assembly, IDA Pro, Ghidra, FPGA, cryptography, hardware, embedded software, hardware security, reverse engineering, side channel attacks, fault injection * Travel required up to 20%. Full Time Must be able to apply for and maintain a U.S. Government Security Clearance ## Description The EndoSec Hardware Security and Vulnerability Analyst is responsible for extracting and analyzing firmware and data at rest, identifying vulnerabilities in software, firmware, and hardware, as well as developing proof of concept exploits. The candidate will collaborate with other engineers and security experts to find and exploit security flaws and vulnerabilities within devices and designs as well as to build secure and efficient systems, contributing to our products and services' ongoing security and privacy. This is a remote position., 1. System Analysis: Analyze systems to understand functionality, failure points, and consequences of failure. 2. Security Measure Circumvention: Bypass implemented security measures to gain access to sensitive data, including enabling debugging, forging or bypassing signatures, gaining elevated privileges, and simulating environmental and working conditions. 3. Binary Code Extraction and Analysis: Extract firmware, executables, and other sensitive data from embedded systems and analyze the extracted code for possible vulnerabilities and sensitive data, e.g. passwords, cryptographic keys, etc. 4. Side-Channel Analysis and Fault Injection: Setup and perform side-channel analysis to recover sensitive data, e.g. cryptographic keys, sensitive plaintext, etc. Setup and perform fault injection attacks to bypass security measures and/or recover sensitive data. 5. Exploit Development: Develop custom and novel exploits to bypass security measures, recover sensitive data, or gain elevated privileges in embedded systems. 6. Documentation: Prepare detailed documentation, including physical setups, testing procedures, and user guides, for reproducibility of found results and maintenance. 7. Continuous Learning: Stay current with the latest advancements in reverse engineering and hardware security to continually refine and enhance skills. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [Detecting Money Laundering with AI](https://www.wearedevelopers.com/videos/111-detecting-money-laundering-with-ai) - [Cracking Cholera’s Code: Victorian Insights for Today’s Technologist](https://www.wearedevelopers.com/videos/772-cracking-cholera-s-code-victorian-insights-for-today-s-technologist) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)