We are currently looking for a highly skilled and experienced Director to build, lead, and grow our Hardware Security service line!
We want technical people leading technical people. This pivotal role involves building a new service line from the ground up, structuring / shaping the client offering, developing methodologies, leading a team of penetration testers, actively collaborating with clients and internal sales teams in the pursuit of new opportunities to grow the service line, and publishing research.
The ideal candidate will possess a deep hands-on understanding of hardware and embedded system security, along with strong leadership and project management skills, with the ability to perform hands-on testing and provide detailed mentorship whenever necessary.
Do you possess extensive knowledge in hardware penetration testing, reverse engineering, low-level programming, code review, and fuzzing techniques?
Aon is in the business of better decisions.
At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.
Join our Aon group, which is a leading provider of specialty insurance solutions and programs offered to professional, small & medium enterprise and consumer markets.
What the day will look like
Develop and implement a strategic plan for the hardware and embedded penetration test service line, including helping to define the service offering.
Lead the development of internal methodologies, checklists, and marketing collateral to support the growth of the hardware penetration testing and reverse engineering service line.
Work closely with Business Development teams and new prospective customers to close new deals.
Build statement of work / proposals for clients that define scope of work, duration, deliverables, and pricing.
Oversee technical delivery of engagements relating to the business. Provide quality assurance and technical review of client work and internal documentation.
Work alongside various internal teams (e.g., operations, finance, delivery, technical) to ensure overall success of client engagement.
Form a team of hardware and embedded penetration testers through recruiting and mentorship.
Cross-train team members within the practice.
How this opportunity is different
As the leader of the hardware and reversing team, you will play a key role in driving our team's success and design the future of our hardware security practice.
This is an opportunity to work on a wide variety of projects, from small-scale assessments to large-scale engagements with major clients.
We offer a collaborative and innovative work environment that encourages creativity and cultivates professional growth. You will have access to a wide range of resources, including training, development programs, and mentorship from experienced experts.
Skills and experience that will lead to success.
- Three or more years of demonstrated ability with business development, scoping, and client / project management.
- 10+ years of relevant professional experience performing hardware / embedded security assessments.
- Experience leading a technical team and collaborating with clients.
- Strong programming and code review skills in C / C++ and ASM. Experience cross compiling and working in various toolchains.
- Proficiency reverse engineering firmware
- Deep understanding of wireless protocols (e.g., Bluetooth, Zigbee)
- Hands-on experience with JTAG, SWD, UART, I2C, and SPI protocols and expertise in using related tooling.
- Experience soldering to remove flash chips, attaching test leads, etc. Experience extracting and analyzing firmware from hardware devices.
Experience flashing custom firmware.
- Familiarity with QEMU, unicorn and / or other applications for emulating devices, firmware, and binaries. Experience with methods of tamper-proofing and potential circumvention methods
- Proficiency in writing custom tooling, as well as working with industry standard applications (e.g., IDA Pro / Ghidra and various debuggers)
- Knowledge of modern exploitation techniques, including heap shaping and familiarity with other attacks such as side-channel, fault-injection, etc.
- Familiarity with fuzzing, instrumenting binaries and writing fuzzing harnesses to identify vulnerabilities via custom tooling and / or AFL, libfuzzer, etc.
- Understanding of security-related topics, such as authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, hashing, principle of least privilege, software attack methodologies, secure data transfer, and secure data storage
These skills / experiences are a plus :
- Expertise in side-channel attacks, power analysis, clock glitching, CPLD / FPGA, and RF analysis.
- Familiarity with embedded device architectures such as ARM, MIPS, PowerPC, x86, etc. RISC-V and microcontroller experience is a plus.
- Sophisticated proficiency in Web Application, Mobile application, and Network penetration testing
- Public / published research and / or CVEs related to hardware and embedded device security testing, embedded device, and hardware / security architecture design review.
- Industry leading certifications (e.g., OSCE / OSED, OSEE, GIAC GREM, eCRE, CREA, etc.)
How we support our colleagues
In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work / life balance, ensuring you can be your best self at Aon.
Furthermore, all colleagues enjoy two Global Wellbeing Days each year, encouraging you to take time to focus on yourself.
We offer a variety of working style solutions, but we also recognize that flexibility goes beyond just the place of work.
- and we are all for it. We call this Smart Working!
Director of Product Security
A company is looking for a Director of Product Security to lead security engineering programs and teams. ...
Director of Service
Digi Security Systems is a leading low voltage security integrator specializing in providing cutting-edge security solutions, including video surveillance, access control, intrusion detection, and more. This key leadership position will oversee the service department, including profit and loss (P/L)...
Director of Information Security
A company is looking for a Director of Information Security to manage people, processes, and technology in a fast-paced operational environment. ...
Director of Hardware Engineering
We are seeking an experienced and innovative Director of Hardware Engineering to lead and inspire a multidisciplinary engineering team in the design, development, and optimization of cutting-edge hardware products. Director of Hardware Engineering. The Director of Hardware Engineering will play a ke...
Director of Security Operations
A company is looking for a Director, SecOps Engineering - Network and Endpoint Security Service Lead. ...
Director of Information Security
Collaborates with peer members of the greater global Nemetschek security team and leads security initiatives for the US-based brands to establish and promote appropriate security standards throughout the Nemetschek Group and provides an effective governance structure to ensure cyber compliance and a...
Director of Physical Security
Position Summary : The Director of Physical Security is responsible for developing, implementing, and overseeing all aspects of physical security operations for Prime Data Centers across multiple locations. Relevant certifications such as CPP (Certified Protection Professional), PSP (Physical Securi...
Director of Information Security - Identity & Access Management (IAM) REMOTE
Build, lead, and mentor a high-performing team of information security professionals, fostering a culture of collaboration, innovation, knowledge-sharing, and continuous learning. The Director of Information Security - Identity and Access Management (IAM) provides leadership to architect and mature ...
Senior Director of Data Security & Privacy
As the Senior Director of Data Security at Lexia, you will play a critical role in developing and executing our comprehensive security and data security strategies. The Senior Director of Data Security and Privacy will report directly to the VP of Product Development & Design and will be a key membe...
Director of Information Security
Director of Information Security, IT Security Director, Information Security Jobs Dallas, IT Security Management, CISSP, Healthcare IT Security, Cybersecurity Jobs. Manage security projects, offering expert guidance on security for other IT projects. Minimum of 7 years of IT experience with at least...