> Markdown version of [/jobs/ext/605612-senior-product-security-consultant](https://www.wearedevelopers.com/jobs/ext/605612-senior-product-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Product Security Consultant

- **Company:** Lorven Technologies Inc
- **Location:** Tewksbury, MA, United States
- **Experience:** Expert
- **Salary:** $200,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Software Debugging, Firmware, Linux System Administration, Network Protocols, Software Security, Information Technology, IoT Security
- **Published:** June 23, 2026
- **Apply:** https://www.careerjet.com/jobad/us1962f03704de67b553efba715b50c3cf

## About the Role

* Strong hands-on penetration testing and product security assessment experience
 * Experience with embedded systems, connected devices, and firmware security analysis
 * Experience with firmware binary analysis techniques and embedded security testing tools
 * Familiarity with hardware/device attack surfaces and embedded system architectures
 * Familiarity with Linux-based systems, network protocols, and secure update mechanisms

Good to have:

 * Experience participating in CRA or regulated product security, or compliance-driven cybersecurity assessments
 * Experience participating in engagement related to export-controlled environments
 * Strong documentation skills

Preferred Certifications

 * OSCP
 * OSEP / OSCE
 * GPEN / GXPN
 * Embedded or IoT security experience preferred
 * Completed SANS training SEC556 (IoT Pen Testing)

Required Experience

 * 7-10 years in product security testing including device-level penetration testing
 * firmware extraction, unpacking, and binary analysis

## Description

* Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field with 12+ years of overall IT experience.
 * Perform hardware and device-level penetration testing
 * Conduct firmware extraction, unpacking, and binary analysis
 * Assess secure boot, firmware integrity, rollback protection, and update mechanisms
 * Evaluate exposed interfaces (USB, network, wireless, serial/debug, administrative services)
 * Validate authentication, authorization, encryption, and secure configuration controls
 * Conduct exploitability validation, attack path analysis, and privilege escalation testing
 * Analyze attack surfaces to identify material security weaknesses across device components
 * Perform resilience testing and evaluate effectiveness of security controls


## Related Videos

- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of)
- [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)