IoT/Cyber Security Engineer

Overview

We are seeking a cybersecurity engineer to enhance the security of IoT devices through comprehensive risk assessments, secure development practices, and testing. You will work closely with development teams to identify vulnerabilities, implement security controls, and stay ahead of emerging threats in connected device environments.

Key Responsibilities

• Implement secure software development lifecycle practices for IoT devices, including threat modeling, security reviews, vulnerability assessments, and penetration testing.
• Identify and document product cybersecurity requirements, conduct risk analysis, and define verification and validation protocols.
• Collaborate with development teams to quantify residual product risk and recommend appropriate security controls.
• Define and verify security mitigations, providing guidance during mitigation development.
• Design and conduct cybersecurity risk assessments and tests, identify security exceptions, and devise compensating controls.
• Develop and execute security test and verification scripts for GUI, Linux operating systems, and interfaces such as RS-485.
• Stay current on emerging security threats, vulnerabilities, and exploitation techniques.
• Lead adoption of security tools such as SCA, SAST, DAST, Black Duck, and Coverity in regulated environments.
• Perform binary analysis, reverse engineering, firmware modification, and radio security analysis.
• Conduct secure onboarding, provisioning, and management of cryptographic keys, PKI infrastructure, secure boot, and secure communications including BLE, WiFi, and Zigbee.
• Develop test routines and protocols to validate security mitigations and perform threat modeling of products.

Requirements

• 3 to 7 years of experience in IoT or cybersecurity engineering.
• Bachelor’s or Master’s degree in Electrical or Computer Engineering with relevant cybersecurity certifications.
• Strong knowledge of security concepts for web, Linux, and infrastructure, including OWASP, NIST, CWE, and related vulnerabilities.
• Hands-on experience with security testing tools such as SCA, SAST, DAST, and penetration testing frameworks.
• Proficiency in implementing PKI, encryption protocols (IPSEC, AES, GRE, IKE, MD5, SHA, 3DES), and secure firmware development, updates, and patch management.
• Experience with binary hardening, memory protection, JTAG debugging, and firmware extraction from EEPROM/Flash.
• Ability to perform threat modeling, risk analysis, and produce clear security recommendations.
• Programming and scripting skills in languages such as C/C++, Java, Python, or similar.
• Familiarity with security standards and certifications such as CISSP-ISSEP, CISSP-ISSAP, CEH, OSCP, CSSLP, or GIAC.
• Strong communication skills, a self-driven attitude, eagerness to learn new technologies, and a positive, problem-solving mindset.