Product Security Engineer

Inmar empowers associates to put clients first, collaborate across teams, and drive results with urgency and accountability while maintaining a safe, inclusive work environment.

About the role

The Product Security Engineer conducts comprehensive security assessments on mobile applications, IoT hardware/firmware, compiled software, and browser extensions. This role involves identifying vulnerabilities, developing mitigation strategies, and collaborating with cross-functional teams to enhance security using both offensive and defensive tactics. The engineer also contributes to supply chain security and third-party risk management.

Responsibilities

• Conduct comprehensive security assessments of mobile applications, IoT hardware/firmware, compiled software, and browser extensions.
• Perform reverse engineering, vulnerability analysis, and penetration testing to uncover security risks.
• Analyze binary file formats (PE, ELF, Mach-O) and runtime behaviors for security flaws.
• Review browser extensions and software plugins for security flaws and compliance with best practices.
• Perform product data analysis to identify potential vulnerabilities and determine access scope.
• Collaborate with cross-functional teams (engineering, product, and security) to enhance security measures and improve resilience against cyber threats.
• Develop and recommend mitigation strategies and risk profiles for identified vulnerabilities.
• Document findings and communicate security recommendations to both technical and non-technical audiences.
• Maintain organizational product inventory with security assessment status and secure configuration requirements.
• Produce and maintain security documentation, such as bill of material repositories and analytical procedure guides.

Requirements

• Bachelor of Science in Computer Science, Electrical Engineering, Cyber Security, or a related field.
• 5-7 years of relevant experience in software exploitation, reverse engineering, malware analysis, or a related field; or equivalent combination of experience and training.
• Proficient in using debuggers, decompilers, and disassemblers to analyze code for vulnerabilities across various CPU architectures, including ARM and RISC-V.
• Strong understanding of binary file formats like PE, ELF, and Mach-O.
• Skilled in low-level data extraction and analysis using tools like QEMU and Verilog.
• Knowledgeable about Linux loaders, binary packing, and embedded systems tools such as BusyBox, binwalk, and u-boot.
• Experienced in capturing and analyzing network traffic using tools like tcpdump and Scapy to dissect proprietary protocols.
• Experienced in BOM enumeration and leveraging tools like CycloneDX for inventory and risk assessment.
• Strong analytical and problem-solving skills, with a keen eye for identifying and mitigating security risks.
• Excellent communication skills for documenting findings and providing security recommendations to diverse audiences.

Preferred Qualifications

• Prior experience working in cybersecurity research or security assessment functions.
• Experience with application security testing and associated static and dynamic analysis tools.
• Knowledge of cryptographic principles and secure coding practices.
• Familiarity with security assessment frameworks and compliance standards.
• Prior experience with radio signals analysis and associated security hardening methodologies.

Skills

• Adaptable: Responds to change with a willingness to learn new ways to accomplish work objectives.
• Innovative: Develops, sponsors, or supports new methods, products, procedures, or technologies.
• Analytical and Critical Thinking: Uses a logical, systematic approach to tackle problems.
• Problem Solving: Gathers and evaluates information to generate and assess potential solutions.
• Communication: Conveys and receives messages clearly in written, oral, and visual formats.
• Effective Execution: Focuses on turning mission into action to achieve results with agility and accountability.

Physical Demands

• Regularly required to use hands to finger, handle, or feel objects, tools, or controls, and reach with hands or arms.
• Regularly required to talk or hear and read instructions on a computer monitor or printed materials.
• Occasionally required to stand, kneel, or stoop, and lift/move up to 25 pounds.
• Regularly required to view items at an extremely close range and adjust focus.
• Regularly required to remain in a stationary position.

Benefits

• Medical, dental, and vision insurance.
• Basic and supplemental life insurance options.
• 401(k) retirement plans with company match.
• Health Spending Accounts (HSA/FSA).
• Flexible time off and 11 paid holidays.
• Family-building benefits, including maternity, adoption, and parental leave.
• Tuition reimbursement and certification support.
• Wellness and mental health counseling services.
• Concierge and work/life support resources.
• Adoption assistance reimbursement.
• Perks and discount programs.

Note: Eligibility for some benefits may depend on job classification and length of employment. Benefits are subject to change and may be governed by specific plan or program terms.

Pay

The hiring range for this position is $110,926.13 – $184,876.88 USD annually. The final offer may vary based on geographic location, job-related skills, education, certifications, work experience, and other relevant factors. Depending on the role, additional compensation may include:

• Annual discretionary bonuses through the Core Company Performance Bonus Plan.
• Equity grants, sign-on bonuses, and other tailored incentive opportunities.
• Additional discretionary compensation, such as growing revenue incentives, corporate or VIP bonuses.
• Deferred compensation opportunities.