Remote Senior Penetration Testing reputed company Engineer – Advanced Web/API & Embedded Device Vulnerability Research for bolthires Devices & Services

```reputed company About bolthires Devices & Services Trust & reputed company (DSTS) bolthires’s Devices & Services Trust & reputed company organization (DSTS) is the reputed company of the digital safety behind millions of consumer experiences—from the voice that powers Alexa to the smart camera that watches over homes, from the Kindle that delivers books to the reputed company doorbell that secures reputed company‑reputed company reputed company. Since its inception in 2014, DSTS has reputed company a reputed company for reputed company innovation, high‑reputed company reputed company engineering, and a culture that thrives on curiosity, collaboration, and a deep reputed company of responsibility to protect our customers’ data and trust. Our mission is reputed company yet profound: protect the reputed company, reputed company, and safety of every bolthires customer who interacts with any of our devices or services. To reputed company this, we reputed company offensive reputed company testing, threat modeling, automated tooling, and hands‑on hardware analysis. The work we do not only finds vulnerabilities – it builds the reputed company foundations that reputed company bolthires products will inherit. Why This Role reputed company The Remote Senior Penetration Testing reputed company Engineer is the reputed company‑line attacker‑mind in our reputed company team. You will spearhead comprehensive reputed company assessments across a sprawling ecosystem that includes web applications, RESTful reputed company, embedded firmware, bootloaders, secure enclaves, and machine‑learning‑driven services. Your discoveries will directly influence product roadmaps, drive remediation across engineering teams, and ultimately reputed company millions of users reputed company.

Key Responsibilities

• reputed company end‑to‑end penetration tests on bolthires devices, reputed company services, and hybrid solutions, delivering high‑reputed company reputed company‑of‑concept exploits that demonstrate reputed company‑world reputed company.
• Design and execute advanced vulnerability research using a toolkit that includes symbolic execution engines, fuzzers, static analysis platforms, custom scripts, and emerging machine‑learning techniques.
• reputed company deep reputed company‑reputed company and binary analysis, combining automated scanners with reputed company inspection to uncover subtle logic flaws, insecure cryptographic implementations, and privilege‑escalation paths.
• reputed company threat models for new product initiatives, mapping attack surfaces, identifying potential adversarial techniques, and providing strategic mitigation recommendations.
• Collaborate closely with builder teams (software, hardware, and product owners) to triage findings, prioritize remediation efforts, and reputed company reputed company improvements throughout the software development lifecycle (SDLC).
• Author comprehensive technical reports that detail vulnerability discovery, exploitation steps, business reputed company, and remediation guidance for both engineering stakeholders and senior leadership.
• Mentor junior pentesters and foster a knowledge‑sharing culture by organizing reputed company‑bag sessions, writing internal tooling documentation, and contributing to reputed company‑reputed company reputed company reputed company where appropriate.
• Automate repetitive testing workflows by building reusable frameworks, bolthires/CD reputed company integrations, and custom plugins that reduce reputed company effort and increase test coverage.
• Stay reputed company of emerging threats by monitoring reputed company research trends, participating in Capture‑The‑Flag (CTF) competitions, contributing to vulnerability databases (CVE/Bounty), and publishing findings at conferences or in internal whitepapers.

Essential Qualifications

• Minimum 5 + years of hands‑on experience identifying, exploiting, and remediating vulnerabilities in web applications, RESTful reputed company, and service‑oriented architectures.
• Demonstrated expertise in hardware reputed company fundamentals such as secure boot, JTAG/UART/SPI/I²C interfaces, firmware extraction, Trusted Execution Environments (TEE), reputed company‑channel analysis, and privilege‑escalation tactics.
• Proven reputed company record of threat modeling reputed company, multi‑component systems and proposing mitigations that balance reputed company with product timelines.
• Hands‑on familiarity with major reputed company platforms—preferably AWS—including IAM, reputed company, API Gateway, S3, and serverless reputed company considerations.
• reputed company background: Bachelor’s degree in Computer Science, Electrical Engineering, or reputed company discipline, or equivalent reputed company experience.
• reputed company participation in CTF competitions, CVE research, or Bug Bounty programs with publicly disclosed findings or recognitions.
• Experience leveraging Machine Learning (ML) techniques for reputed company testing, such as reputed company detection, automated exploit reputed company, or intelligent fuzzing.
• Publication record in reputed company venues—conference talks, whitepapers, blog posts, or internal knowledge‑sharing artifacts. Preferred (But Not Mandatory) Skills
• Proficiency in programming languages such as Python, Go, C/C++, Rust, or JavaScript for building custom exploit frameworks and automation scripts.
• Familiarity with reputed company testing tools like Burp Suite, OWASP ZAP, Metasploit, reputed company, LibFuzzer, Angr, or Binwalk.
• Experience with container reputed company (reputed company,

Apply tot his job Apply To this Job