Security Researcher

About UsRed Balloon Security (RBS) is a leading embedded security provider and research firm committed to securing embedded devices across a range of critical industries and shaping the future of the embedded security industry. For more than 15 years, Red Balloon Security has built mission-grade firmware and embedded security for the most sensitive defense, intelligence, and critical infrastructure systems. Our customers include the DoW, Air Force, Navy, Space Force, Homeland Security, large defense contractors, and several Fortune 500 companies. Additionally, our R&D team consists of world-class academic researchers and developers, who consistently publish seminal research papers in the field of embedded security and perform high-profile research programs funded by the U.S. Government, including DARPA, Air Force, Space Force, Navy, and the Department of Homeland Security.Job DescriptionResearch security vulnerabilities to protect embedded devices from firmware, hardware, and platform-level threatsDesign and implement host-based defense software for black-box embedded devicesAnalyze firmware images, boot chains, update mechanisms, device interfaces, and embedded operating systemsDesign and implement automated HW / SW testing infrastructureConduct offensive and defensive research on embedded HW / SWContribute to the OFRAK (Open Firmware Reverse Analysis Konsole) frameworkPerform HW / SW reverse engineering on embedded devicesAutomate vulnerability identification for embedded softwareUse AI tooling, agents, MCP servers, and test harnesses to accelerate security research and vulnerability analysisRequired Skills and QualificationsBA/BS in computer science, computer or electrical engineering or a related majorProficiency in hardware and software reverse engineeringFamiliarity with fuzzing, static analysis, and REExperience with low-level software design and implementationUnderstanding of modern software design and engineering practicesKnowledge of AI tooling and familiarity with frontier modelsAbility to work effectively in a hands-on research and lab environmentStrong self-initiative and self-motivationExperience with RE tools such as Ghidra, IDA, Binary Ninja, OFRAKPreferred Skills and QualificationsMA/MS in Computer Science or related fieldExperience with ARM, MIPS, PowerPC, x86, or RISC-V assemblyStrong understanding of OS design and implementationKnowledge of vulnerability discovery methods and practical exploitation techniquesFamiliarity with embedded interfaces and protocols such as UART, JTAG, SWD, SPI, I2C, USB, Ethernet, CAN, or similar technologiesKnowledge of logic analyzers, HW debuggers, RF analyzers, oscilloscopesExisting security clearance or ability to obtain clearanceOur WorkRecent work from our team includes RASPUTIN, our human-on-the-loop hardware reversing robot; OFRAK, our open-source binary analysis and modification platform for firmware (ofrak.com); and a controlled lab replay of the public Copy Fail Linux kernel exploit (CVE-2026-31431) on an embedded Linux target configured with Symbiote, our runtime protection. Our published research, including Thrangrycat and the Siemens SIMATIC S7-1500 protected-boot bypass, is at redballoonsecurity.com/research.Compensation and BenefitsThis is a full time, in office position with Remote.NY Salary Range: $100k-150kFull-time employees are also eligible for discretionary bonuses and equity in the company.Red Balloon Security offers a full benefits package, 401k, flexible vacation policy, and paid health and dental plans. The Company is located in Midtown West in New York City. Red Balloon Security is an Equal Opportunity Employer.