Senior Security Researcher

Overview

Geotab is a global leader in IoT and connected transportation and certified “Great Place to Work.” We are a company of diverse and talented individuals who work together to help businesses grow and succeed, and increase the safety and sustainability of our communities. Geotab advances security, connects commercial vehicles to the internet and provides web-based analytics to help customers manage their fleets.

Our platform and Geotab Marketplace offer hundreds of third-party solutions, enabling both small and large businesses to automate operations by integrating vehicle data with other data assets. Processing billions of data points a day, Geotab uses data analytics and machine learning to improve productivity, optimize fleets, enhance driver safety and ensure regulatory compliance.

Our team is growing. We seek people who follow their passion, think differently and want to make an impact in a fast-paced, evolving environment. Geotabers take on new tasks even if they are not described in the initial job description. Join us for a fulfilling career with opportunities to innovate, great benefits, and an inclusive work culture. To see what it’s like to be a Geotabber, check our blog and follow us @Inside Geotab on Instagram.

Join our talent network to learn about opportunities and company news.

Geotab is seeking a Senior Security Researcher who will ensure and enforce secure development standards across hardware and embedded development. The projects will vary in scope, complexity, and affected business area. If you love technology and want to join an industry leader, we would love to hear from you.

As a Senior Security Researcher, you will use programming tools to test devices, configurations, and code, provide risk assessments for vulnerabilities, and report on the overall quality of current security standards. You will work closely with Geotab software developers, the broader Security team, and global strategic initiative stakeholders. You will be a highly organized self-starter with meticulous attention to detail and the ability to engage with all levels of the organization.

The successful candidate will have strong technical competence in security evaluation and research and the ability to manage multiple tasks and projects while delivering expert recommendations for process improvements.

Conduct device, cloud infrastructure or web application and code testing for all systems and applications, open source dependencies, and provide analysis and risk assessments for vulnerabilities discovered.

• Leverages security expertise in Hardware and Embedded Development

Conduct focused information security research and make recommendations on changes within the department and company.

Utilize code analysis and fuzzing tools to assess the quality and security of source code.

Provide recommendations on tools to address gaps in coverage and define and implement security technical and process improvements.

Contribute to secure device configuration, infrastructure design and coding standards, including developing secure coding training for current and future developers.

Conduct manual code reviews for all systems and code changes for a given device, system or application release, providing a detailed risk analysis of the security posture of the code and technical programming solutions to mitigate insecure code.

Provide reporting on overall quality of device, infrastructure configuration or source code from a security perspective by project/team (includes trend analysis, defects found, defects remediated, and time to remediated).

Triages and handles/escalates security issues within area of expertise.

Supports Geotab global strategic initiatives.

8+ years of experience with security evaluation/analysis within a technical organization, including security code reviews and risk assessments.

• 8+ years of experience performing hardware, infrastructure, or embedded development (e.g., network protocol analysis, debugging, virtualization).

Post-Secondary Diploma/Degree in Computer Science, Information Management, Engineering, or a related field.

Tec…