Pros
- Freedom to pursue independent cybersecurity research - Immediately exposed to meaningful company and client work - Friendly and helpful coworkers, likewise for management - Ultimate "work from home" freedom - Many travel and conference opportunities - Excellent equipment resources - I work with embedded devices but the company specializes in most cybersecurity topics and I can easily interact and work with other consultants with different specialties - Large company benefits in a small company atmosphere
Cons
- IOActive has fully embraced work from home, so much of the company is spread around the world. You can easily go several weeks or months without seeing coworkers or clients in person - Most vulnerability-finding work is completely open ended. You have to be able to learn what you're looking at and make your own decisions on what areas to focus on. I personally don't have an issue with this, but you do need initiative and good intuition