Role description
Red Balloon Security, Inc.About Us
Red Balloon Security (RBS) is a leading embedded security provider and research firm committed to securing embedded devices across a range of critical industries and shaping the future of the embedded security industry. For more than 15 years, Red Balloon Security has built mission-grade firmware and embedded security for the most sensitive defense, intelligence, and critical infrastructure systems. Our customers include the DoW, Air Force, Navy, Space Force, Homeland Security, large defense contractors, and several Fortune 500 companies. Additionally, our R&D team consists of world-class academic researchers and developers, who consistently publish seminal research papers in the field of embedded security and perform high-profile research programs funded by the U.S. Government, including DARPA, Air Force, Space Force, Navy, and the Department of Homeland Security.
Job Description
- Research security vulnerabilities to protect embedded devices from firmware, hardware, and platform-level threats
- Design and implement host-based defense software for black-box embedded devices
- Analyze firmware images, boot chains, update mechanisms, device interfaces, and embedded operating systems
- Design and implement automated HW / SW testing infrastructure
- Conduct offensive and defensive research on embedded HW / SW
- Contribute to the OFRAK (Open Firmware Reverse Analysis Konsole) framework
- Perform HW / SW reverse engineering on embedded devices
- Automate vulnerability identification for embedded software
- Use AI tooling, agents, MCP servers, and test harnesses to accelerate security research and vulnerability analysis
Required Skills and Qualifications
- BA/BS in computer science, computer or electrical engineering or a related major
- 5+ years of experience in security research
- Proficiency in hardware and software reverse engineering
- Familiarity with fuzzing, static analysis, and RE
- Experience with low-level software design and implementation
- Understanding of modern software design and engineering practices
- Proficiency in C/C++ and Python
- Knowledge of AI tooling and familiarity with frontier models
- Ability to work effectively in a hands-on research and lab environment
- Strong self-initiative and self-motivation
- Experience with RE tools such as Ghidra, IDA, Binary Ninja, OFRAK
- Experience with virtual environments, Docker containers, and ZeroTier
- Knowledge of FPGA, CPLD, VHDL, Verilog, state machine analysis
Preferred Skills and Qualifications
- MA/MS/PhD in Computer Science or related field
- Experience with ARM, MIPS, PowerPC, x86, or RISC-V assembly
- Strong understanding of OS design and implementation
- Knowledge of vulnerability discovery methods and practical exploitation techniques
- Knowledge of embedded interfaces and protocols such as UART, SWD, SPI, JTAG, I2C, USB, Ethernet, CAN, or similar technologies
- Familiarity with high speed buses such as PCIe, Serdes, DDR5
- Knowledge of logic analyzers, HW debuggers, spectrum analyzers, signal generators, oscilloscopes, RF, test equipment, signal integrity
- Existing security clearance or ability to obtain clearance
Our Work
Our published research includes Thrangrycat, a persistent bypass of Cisco's proprietary secure boot, and the Siemens SIMATIC S7-1500 protected-boot bypass (redballoonsecurity.com/research). Recent work from the team includes a controlled lab replay of the public Copy Fail Linux kernel exploit (CVE-2026-31431) on an embedded Linux target configured with Symbiote, our runtime protection; RASPUTIN, our human-on-the-loop hardware reversing robot; and OFRAK, our open-source binary analysis and modification platform for firmware (ofrak.com).
Compensation and Benefits
This is a full-time position - can be in office in NYC or remote
NY Salary Range: $150k-$225k
Full-time employees are also eligible for discretionary bonuses and equity in the company.
Red Balloon Security offers a full benefits package, 401k, flexible vacation policy, and paid health and dental plans. The Company is located in Midtown West in New York City. Red Balloon Security is an Equal Opportunity Employer.