IoT security engineer

About the Role

We are seeking a talented Mid-level IoT Security Engineer to join our Application Security team. This full-time, on-site position requires 2-5 years of experience in securing Internet of Things ecosystems and connected devices. The ideal candidate will be responsible for identifying vulnerabilities, implementing security measures, and ensuring the integrity of IoT applications and infrastructure. You will work closely with cross-functional teams to embed security best practices throughout the IoT development lifecycle, from device firmware to cloud connectivity. This role offers an exciting opportunity to work at the forefront of emerging technology security challenges in a dynamic and collaborative environment.

Responsibilities

• Conduct security assessments and penetration testing of IoT devices, applications, and networks
• Identify and remediate security vulnerabilities in IoT firmware, embedded systems, and communication protocols
• Design and implement security architectures for IoT ecosystems including device-to-cloud communications
• Develop and enforce security standards, policies, and best practices for IoT application development
• Perform threat modeling and risk assessments specific to IoT environments
• Monitor and respond to security incidents affecting IoT devices and infrastructure
• Collaborate with development teams to integrate security controls into the IoT application development lifecycle
• Stay current with emerging IoT security threats, vulnerabilities, and mitigation techniques
• Document security findings, detailed reports, and present recommendations to stakeholders

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
• 2-5 years of hands-on experience in IoT security, application security, or related cybersecurity roles
• Strong understanding of IoT architectures, protocols (MQTT, CoAP, Zigbee, BLE), and communication standards
• Experience with security testing tools and methodologies for embedded systems and IoT devices
• Knowledge of common IoT vulnerabilities and attack vectors (OWASP IoT Top 10)
• Familiarity with cryptographic protocols and secure authentication mechanisms
• Understanding of network security principles and wireless communication security
• Ability to work on-site full-time at the designated office location
• Strong analytical and problem-solving skills with attention to detail
• Excellent communication skills and ability to work effectively in cross-functional teams