Staff Security Engineer

Alarm.com - Tysons Corner, VA

Hiring: Staff Security Engineer Company: Alarm.com Location: Tysons Corner, VA Job Posted Time: 2026-09-10 10:43:57 Target Skills & Keywords : Embedded Systems, Firmware, Linux, Penetration Testing, Risk Management, Systems Design About the job Experience: •10+ years of information security experience, with a strong focus on offensive security, penetration testing, or vulnerability research Required Skills: •Perform IoT penetration testing, including firmware extraction, reverse engineering, and vulnerability discovery •Perform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systems •Use a combination of manual and automated techniques to assess risks and circumvent security mechanisms of devices and application •Oversee and manage the deployment, integration, and configuration of security solutions and enhancements to existing IoT infrastructure and the enterprise’s security documents •Select and acquire additional security solutions or enhancements to existing security solutions to improve overall IoT enterprise security •Clearly outline and document risk impacts of test findings in reports •Test, triage, and drive remediation of security issues reported by external parties •Actively partner with infrastructure, application, product, and other stakeholders to ensure deployed solutions minimize security and privacy risks Qualifications: •B.A. or B.S. (or higher) in Computer Science, Electrical Engineering, or a related engineering program with strong academic performance preferred •Prior experience performing security testing and assessment in IoT, embedded, or firmware based environments •Solid functional working knowledge of embedded system design and constraints (development experience a plus, but not required) •Operational familiarity with using hardware debugging equipment such as oscilloscopes, logic analyzer and other tools •Operational familiarity with interface protocols such as UART, I2C, SPI, JTAG, and related tooling. •Operational familiarity with ARM CPU architectures with exposure to x86, RISC-V, or others as a plus •Certification in one or more Information Security disciplines is preferred or ability to obtain certifications. •Self-starter, analytical, tenacious problem solver •Strong verbal and written communication skills for a highly collaborative environment •Rigorous attention to detail and focus on quality of deliverables Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!