IoT/Cyber Security Engineer

Key Responsibilities: - Implement secure software development lifecycle practices for IoT devices, including threat modeling, security reviews, vulnerability assessments, and penetration testing. - Identify and document product cybersecurity requirements, conduct risk analysis, and define verification and validation protocols. - Collaborate with development teams to quantify residual product risk and recommend appropriate security controls. - Define and verify security mitigations, providing guidance during mitigation development. - Design and conduct cybersecurity risk assessments and tests, identify security exceptions, and devise compensating controls. - Develop and execute security test and verification scripts for GUI, Linux operating systems, and interfaces such as RS-485. - Stay current on emerging security threats, vulnerabilities, and exploitation techniques. - Lead adoption of security tools (e.g., SCA, SAST, DAST, Black Duck, Coverity) in regulated environments. - Perform binary analysis, reverse engineering, firmware modification, and radio security analysis. - Conduct secure onboarding, provisioning, and management of cryptographic keys, PKI infrastructure, secure boot, and secure communications (BLE, WiFi, Zigbee, etc.). - Develop test routines and protocols to validate security mitigations and perform threat modeling of products. What We're Looking For: - 3 to 7 years of experience in IoT or cyber security engineering. - Bachelor’s or Master’s degree in Electrical/Computer Engineering with relevant cyber security certifications. - Strong knowledge of security concepts for web, Linux, and infrastructure, including OWASP, NIST, CWE, and related vulnerabilities. - Hands‑on experience with security testing tools (SCA, SAST, DAST) and penetration testing frameworks. - Proficiency in implementing PKI, encryption (IPSEC, AES, GRE, IKE, MD5, SHA, 3DES), and secure firmware development, updates, and patch management. - Experience with binary hardening, memory protection, JTAG debugging, and firmware extraction from EEPROM/Flash. - Ability to perform threat modeling, risk analysis, and produce clear recommendations. - Programming/scripting skills in languages such as C/C++, Java, Python, or similar. - Familiarity with security standards and certifications (e.g., CISSP‑ISSEP, CISSP‑ISSAP, CEH, OSCP, CSSLP, GIAC). - Strong communication skills, self‑driven attitude, eagerness to learn new technologies, and a positive, problem‑solving mindset.