Software Deconstruction Engineer (aka Penetration Tester aka Infosec Consultant)

We are back in hiring mode to staff up our team in response to strong account growth in 2023 and to meet our 2024 plans. The process starts with a technical puzzle that should take around an hour and will give you an idea of exactly what we mean by software deconstruction. Got questions? You’ll get a short intro call right after the puzzle. This is the best place to raise any questions you might have. Thanks …the ivision Assessment Team.

What’s the job?

• You will work on information security projects for our clients. We test security of software and hardware systems.
• Understanding how systems are built and learning how to break them.
• Working with our experienced team on short-to-medium term engagements.

This is a full-time job working for the ivision Assessment Team (https://research.ivision.com). We are titled as “consultants” but the position being offered is a traditional permanent hire.

What would you do?

Every two to three weeks you’ll get a new project to work on. A typical project will involve:

• Recon: Digging into the functionality, design, and implementation of the software system or device.
• Probing: Searching for implementation weaknesses which could indicate a security issue. This is a combination of tools that we use, tools that we build, and manual probing. For device projects this can include firmware extraction, analysis, and hardware interfacing.
• Extending: Now that you’ve found a weakness… how far can you extend your access into the system?
• Writing: Now that you’ve hacked your way in you’ll need to write-up your findings and work with the developers to make sure they understand what the problem is and how to fix it.

If you enjoy puzzles and technical variety you’ll find this job very enjoyable.

Who are we looking for?

• You do not need to have information security experience. If you’ve got the right technical background and problem solving skills we can train you in the dark arts of infosec.
• People who enjoy writing code, solving problems with code, and learning how computers work at a fundamental level.
• This is not a “travel every week” type of consultant. We do sometimes work at a client site but most of the time we do our projects remotely.

We’re hiring for all experience levels: from zero career experience to information security veterans.

Skills & Requirements

• Deep experience in software and computers. You may have earned this experience with a degree, career as a software developer, or perhaps you’ve invested in a technical hobby that took you deep into the rabbit hole.
• Technical writing skills (English)
• Resident of the USA and able to be employed in the USA.

We encourage remote candidates to apply if they are residents of the USA.

Some History

Carve Systems was a boutique information security consulting firm. We were acquired by ivision in 2021 and now form the ivision Assessment Team. ivision is a managed services and consulting provider headquartered in Atlanta, with offices in Denver and Pittsburg. The former Carve team does all the same things that we used to do, except now we get to work with ivision’s customers and collaborate with other ivision teams to provide deeper remediation advice and services. Our combined Carve Systems and ivision research content is now showcased at https://research.ivision.com (new and growing!).