Security Consultant

Security Consultant

Rate: $70/hr W2

100% remote

Cannot be TN visa or live in California

Role Overview

· Position: Security Consultant

· Core Focus: Software security analysis heavily emphasizing third-party applications introduced by employees.

· Primary Environment: Predominantly Windows software, with some Linux.

Primary Requirement: First-Principle Systems Knowledge

· Candidates must deeply understand how a computer functions at a low level, regardless of the operating system or software stack running on it.

· The ability to explain core concepts fundamental to modern computing is mandatory, as this foundation is required to effectively reason about security.

· Hiring managers will actively filter for this low-level understanding by looking for hands-on work experience, projects, or hobbies in the following areas:

o Compiler or Operating System design.

o Writing a debugger.

o Computer hardware design (especially secure hardware), including hardware interfacing and instrumentation.

o Code optimization.

o Emulation or Virtualization implementation and design (e.g., utilizing frameworks like QEMU for advanced testing or manipulation). Note: Merely using virtualization technologies as an end-user is insufficient.

o Vintage computing.

Technical Responsibilities & Capabilities

Reverse Engineering & Analysis: Perform reverse engineering on binaries and conduct network analysis (e.g., interception, decryption) to uncover vulnerabilities, hidden data exfiltration, or unauthorized behaviors.

Tooling: Familiarity with reverse engineering tools like Binary Ninja is a plus, but tool-agnostic capabilities are expected. Candidates who build custom offensive tooling, fuzzing frameworks, or automated testing protocols strongly align with the desired profile.

· Security Validation: Ensure software complies with internal security guidelines and internal policies (e.g., restricting unauthorized network connections).

Collaboration: Work closely with internal domain experts, platform engineering teams, frontline support, and end users to deliver findings and suggest practical, balanced workarounds.

Experience & Qualifications

· Experience Level: 3–5+ years of relevant experience (mid-to-senior level).

· Valued Backgrounds: Prior experience in network/system administration, broad technical understanding of process flows, or participation in Capture-the-Flag (CTF) competitions.

· Certifications: Not required or prioritized; demonstrable, hands-on skills take strict precedence over formal certifications.

Here are 5 separate Boolean search strings, each targeting a different angle of the hiring manager's updated requirements:

1. The "First-Principles" Core Search Focuses on the core reverse engineering requirement paired directly with the hiring manager's specific low-level system indicators.

("reverse engineering" OR "reverse engineer" OR "binary analysis") AND ("compiler design" OR "operating system design" OR "OS design" OR "wrote a debugger" OR "custom debugger" OR "hardware design" OR "code optimization" OR "vintage computing") AND (security OR cybersecurity OR vulnerability)

2. The Emulation & Virtualization Design Search Targets candidates who design or implement emulators/virtualization (like QEMU), avoiding those who merely use VMs as end-users.

("emulation implementation" OR "emulator design" OR "virtualization implementation" OR "virtualization design" OR "hypervisor development" OR QEMU) AND ("reverse engineering" OR "vulnerability research" OR "software analysis") AND (Windows OR Linux)

3. The SysAdmin/Network Analysis Crossover Captures the highly valued background in network/system administration combined with network analysis, interception, and security.

("system administrator" OR sysadmin OR "network administrator" OR "network engineering") AND ("network analysis" OR "packet analysis" OR interception OR decryption OR Wireshark) AND ("reverse engineering" OR "software security")

4. The CTF & Low-Level Projects Search Filters for candidates with Capture the Flag experience who also possess the deep hardware or systems-level project experience requested.

(CTF OR "Capture the Flag" OR DEFCON) AND (compiler OR "custom debugger" OR "secure hardware" OR "hardware design" OR "code optimization" OR "vintage computing") AND ("software security" OR "security consultant")

5. The Tooling & Third-Party Threat Search Focuses on specific reverse engineering tools (like the team's preferred Binary Ninja) and the practical application of analyzing third-party software threats.

("Binary Ninja" OR "IDA Pro" OR Ghidra) AND ("third-party software" OR "sandbox testing" OR "data exfiltration" OR "threat modeling") AND (compiler OR debugger OR emulator OR virtualization OR "OS design")