Principal IoT / OT Security Consultant (m/f/x)

LOCATION: Düsseldorf - remote / Germany

What we offer:

Full-time or part-time, according to your needs;
We show our code proudly during our conversation, if you are interested in that;
The opportunity to become a member of the open-source community via our open-source project: https://unblob.org/;
An international R&D team distributed in Austria, Belgium, Germany, and Hungary;
Opportunity to work remotely or from our awesome office in Budapest / Vienna / Düsseldorf;
Opportunity to present at renowned security conferences;
Flexible working hours and no overtime;
Reimbursing of the monthly public transport pass;
A transparent and open-minded culture;
Opportunity to meet your colleagues in person in Austria / Germany / Hungary;
A start-up atmosphere, but with stream-lined processes (not overcontrolled ones!);
Slack for our daily communication.

ONEKEY is a leading European specialist for automated security & compliance analysis for manufacturing (OT) and Internet of Things (IoT) devices.

Using automatically generated “Digital Twins” and “Software Bill of Materials (SBOM)” of devices, ONEKEY autonomously analyzes firmware for critical security vulnerabilities and compliance violations, all without source code, device, or network access.

Vulnerabilities for attacks and security risks are identified in the shortest possible time and can thus be specifically remedied. Easily integrated into software development and procurement processes, the solution enables manufacturers, distributors, and users of IoT technology to check security and compliance quickly and automatically before use, 24/7 throughout the product lifecycle.

Leading companies, such as SWISSCOM, VERBUND AG and ZYXEL, are using this platform today – universities and research institutions can use the ONEKEY platform for study purposes free of charge.

Join our team if you are enthusiastic about IT security, want to work with the latest technologies, and care to bring security to the IoT world.

In order to grow our team, we are looking for an PRINCIPAL IOT / OT SECURITY CONSULTANT (M/F/X).

We are looking for you if you

Responsibilities:

Supporting and consulting our clients throughout their product security life cycle;
Independent security analysis and penetration testing of embedded devices including both hardware and software layers;
Understanding and translating our clients' needs into technical IoT/OT security concepts; 
Articulating technical requirements and methods; 
Researching IoT device vulnerabilities, publish findings and present at conferences;
Cooperating with the developers to integrate and automate research findings into the product;
Extending the firmware analysis capabilities of the product to cover latest vulnerabilities and best practices;
Providing quality security research for content-driven marketing campaigns.

Qualifications:

Experience with embedded security, in particular with embedded Linux systems, various real-time operating systems (FreeRTOS, VxWorks, etc.), and microcontroller-based devices;
Experience in hardware hacking; 
Strong communication & presentation skills and business acumen; 
Enthusiasm for problem solving; 
Willingness to travel (working several days a week at our clients' sites; >20% travel time). 
Experience with penetration testing, researching exploits, reverse engineering;
Experience with embedded & IoT devices security, hardware security;
Skilled in scripting and profile in Python;
Excellent level of written and oral English.