Sr. IoT/Cyber Security Specialist

Overview

We are looking for a cybersecurity expert to lead the design and architecture of secure connected products. In this role, you will collaborate with product and engineering teams to identify security risks, develop threat models, and implement effective security measures. You will also mentor development teams and ensure compliance with industry security standards.

Key Responsibilities

• Provide technical design and architectural leadership in cyber and product security.
• Collaborate with product and engineering teams to document security architecture, attack surfaces, trust boundaries, and data flows.
• Develop and maintain threat models, identify cybersecurity threats, and define security mitigations.
• Identify and document product cybersecurity requirements and conduct risk analysis, verification, and validation.
• Coach and mentor software and firmware development teams on security best practices.
• Define, verify, and guide the implementation of security mitigations.
• Develop, maintain, and implement security policies, standards, and procedures.
• Design and conduct cybersecurity risk assessments and tests, proposing compensating controls.
• Provide expertise on OWASP/CWE vulnerabilities and emerging threats, especially in automotive.
• Lead implementation of PKI, secure boot, secure communications, identity management, secure firmware updates, and configuration management.
• Perform binary hardening, memory protection, radio security analysis, and reverse engineering.
• Conduct penetration testing, vulnerability analysis, and use SCA, SAST, and DAST tools.
• Ensure compliance with standards such as ISO 27001/2, NERC, NIST, IEC 62443, GDPR, and HIPAA.

Requirements

• 7-12 years of experience, including at least 10 years in software engineering focused on secure product design.
• Experience in the automotive industry preferred.
• Strong knowledge of secure software development lifecycle, threat modeling, risk assessment, and security-by-design principles.
• Hands-on experience with threat modeling tools (e.g., SD Element) and penetration testing frameworks.
• Proficiency with SCA, SAST, DAST tools, binary analysis, reverse engineering, and cryptographic implementations such as PKI, AES, and IPSEC.
• Familiarity with UNECE security standards, internal communication protocols, JTAG, and firmware extraction.
• Experience with cybersecurity standards including ISO 27001/2, NERC, NIST, IEC 62443, GDPR, and HIPAA.
• Programming experience in C/C++, Java, Python, or similar languages.
• Strong communication skills, self-driven attitude, eagerness to learn, positive mindset, and problem-solving abilities.

Nice to Have

• Relevant security certifications such as CISSP-ISSEP, CISSP-ISSAP, CEH, OSCP, CSSLP, or GIAC.