Posted:

12/14/2022 GRIMM is looking for a self-starting, responsible, highly motivated Security Researcher to join our Cyber-Physical (CyPhy) Systems group. As a Security Researcher, you will conduct independent and collaborative research, communicating technical concepts in written form. You will be positioned to have a work balance of independent and team research with consulting engagements for client deliverables. GRIMM's CyPhy team equally values skills and knowledge acquired through hands-on experience, passion projects, and hobbyist activities as much as knowledge acquired through academic programs. Join us as we advance the art of the possible in delivering cybersecurity awareness, training, research, and testing into industries such as automotive, aerospace, critical infrastructure, medical and advanced manufacturing. Responsibilities Utilize project management skills to lead complex, multi-disciplinary projects from start to finish Work with customers as part of a team to develop requirements, produce/test services, and provide the necessary documentation Participate in project teams to produce proposals to support project scoping Mentor and provide technical guidance to junior-level researchers and engineers Continuously master and stay well-versed in Cyber-Physical Systems Security Work independently in a remote environment and in a team setting at the GRIMM Cyber Research Lab in Cedar Springs, Michigan (other lab locations, as assigned) Requirements 3+ years of independent security research, ideally with experience supporting internal Research & Development teams Demonstrated knowledge of security for physical systems (robotics, medical devices, aerospace, automotive, etc.) Strong oral and written communication skills with the ability to explain complex ideas clearly and concisely Well-developed leadership skills with the ability to prioritize and execute in a timely manner Proficient at being responsive, responsible and transparent in a fast-paced ever-changing environment Ability and willingness to travel, domestic and internationally. (Travel averages around 15-20%. All travel adheres to CDC guidelines.) Preferred Skills Software Reverse Engineering, especially on embedded system architectures (ARM, PowerPC, various 16 and 32-bit microcontrollers, etc) Fuzzing, especially fuzzing of embedded systems Hardware Reverse Engineering Experience with Wireless/RF Communication (WiFi, Bluetooth, NFC, proprietary RF) Experience with Cellular/LTE Some amount of coding experience (Python, C, C++, Assembly) Experience with delivering presentations and trainings

Location:

GRIMM's CyPhy team is primarily located in the Grand Rapids, Michigan area. Due to the hands-on nature of much of our work, preference is for candidates already located in or willing to relocate to West Michigan.

Compensation:

The US base salary range for this full-time position is $92,700

• 142,000 + short-term bonus + long-term incentive + benefits.

The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for this position. Individual pay is determined by work location, job-related skills, experience, and relevant education and training. Why GRIMM? GRIMM offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Work with a team of skilled people who think hacking is fun Medical/dental/vision insurance that begins on Day 1 $0 premium option for Medical, Dental and Vision for you and your dependents Flexible PTO policy

• that we encourage our employees to utilize 401(K) Retirement Plan with a 5% company match and no vesting period Share Options
• all employees are owners of the company and share in the success Health & Dependent Care Flexible Spending accounts are available options Paid Parental Leave 11 paid holidays a year
• including MLK Day, Juneteenth, Indigenous People's Day, and Veteran's Day Company-provided MacBook and equipment so you are set up for success GRIMM is a pioneering cybersecurity organization led by business-savvy experts.

Our services are informed by extensive experience working with advanced threats, discovering critical vulnerabilities, and demonstrating meaningful solutions for advanced problems. Our insight is built on operational experience in solving the most challenging cybersecurity problems. Our engineers, researchers, and exploit mitigation experts actively hunt for unknown and undocumented threats. GRIMM works with government and commercial clients from various industries, services, and specialties that require the ability to uncover security gaps and areas of exposure at every level. Learn more about us at grimmcyber.com. GRIMM promotes a Drug-Free Workplace, is an Equal Opportunity Employer, and is an Affirmative Action Employer. We participate in E-Verify.