AI made finding vulnerabilities cheap. We make proving them scale. If that sentence excites you, we should talk.
ELTON sits where AI testing, embedded security, and FDA evidence requirements meet. Very few teams get to work on all three at once.
Test-case generation, execution harnesses, and verification logic that runs against real devices, not mock targets.
Graph models that collapse thousands of findings into the few root causes worth an engineer's time.
VEX, MDDT-rated scoring, and audit trails that hold up in front of the FDA and EU notified bodies.
We hire deliberately and often before a role is posted. If you have spent time in medical device security, embedded exploitation, graph databases, or regulatory affairs, introduce yourself.
Tell us what you have broken, built, or defended. We read every note.
There are no public postings at the moment. ELTON hires deliberately and often before a role is posted, so an introduction still counts. If you have spent time in medical device security, embedded exploitation, graph databases or regulatory affairs, send a note rather than waiting for a listing to appear.
Three things. The testing pipeline: test-case generation, execution harnesses and verification logic that run against real devices rather than mock targets. The dependency graph: graph models that collapse thousands of findings into the few root causes worth an engineer's time. And regulatory evidence: VEX, MDDT-rated scoring and audit trails.
AI made finding vulnerabilities cheap. Proving which of them actually matter did not get cheaper at the same rate, and that gap is the proof layer. The engineering work sits on the proving side: verification that runs against real hardware, graph models that find root causes, and evidence a regulator will accept.
Medical device security, embedded exploitation, graph databases, or regulatory affairs. Depth in any one of those is a starting point. The note that gets read describes what you have broken, built or defended, rather than a list of tools you have used.
The stakes are regulated. Output has to satisfy an FDA reviewer or an EU notified body, and it has to hold up years after it was produced. Very few teams work on testing pipelines, embedded security and regulatory evidence at the same time, and at ELTON all three sit in the same product.