IoT Security Engineer

Key Responsibilities:

• Perform hands-on security testing and vulnerability assessments of IoT devices, connected hardware, gateways, controllers, edge devices, wireless technologies, industrial equipment, and related field-deployed systems.
• Assess the security of device configurations, communications architectures, authentication mechanisms, credential and secrets management, provisioning workflows, firmware update processes, secure boot implementations, remote access solutions, and system integrations.
• Conduct authorized security assessments of connected products and embedded systems, including hardware analysis, firmware review, protocol testing, network traffic analysis, physical access testing, and device configuration assessments.
• Evaluate device communications and network interactions across enterprise, cloud, and operational technology environments, including TCP/IP networking, DNS, routing, firewalls, network segmentation, wireless technologies, cellular communications, and common IoT or industrial protocols.
• Support security reviews of connected product ecosystems, industrial control systems, edge computing architectures, data collection platforms, operational technologies, and associated communications infrastructure.
• Utilize industry-standard security tools and methodologies to identify, validate, and document vulnerabilities across hardware, firmware, software, and network layers.
• Partner closely with engineering, product, and architecture teams to develop practical remediation strategies, secure configuration guidance, compensating controls, and risk-based mitigation plans.
• Validate security findings identified through internal assessments, third-party testing, customer inquiries, vulnerability management programs, automated scanning, product reviews, and field observations.
• Produce clear technical documentation and assessment reports detailing vulnerability impact, affected components, exploitability, business risk, remediation recommendations, and validation outcomes.
• Communicate technical findings and recommendations to engineering teams, product leaders, cybersecurity stakeholders, business partners, and customer-facing organizations.
• Participate in customer and stakeholder discussions related to product security, secure deployment practices, vulnerability management, and security program maturity.
• Contribute to the development and enhancement of product security standards, testing methodologies, secure design practices, vulnerability management processes, hardening guidance, and reusable security documentation.
• Collaborate with cloud, application, mobile, identity, and API security teams when security findings span multiple technology domains or integrated platforms.
• Monitor emerging threats, vulnerabilities, techniques, and industry trends related to embedded systems, connected devices, industrial technologies, wireless communications, and cloud-connected products.
• Promote security-by-design principles and advocate for secure product development, deployment, and lifecycle management practices throughout the organization.

Required Skills & Experience:

• Bachelor’s Degree in Computer Science, Electrical Engineering, Computer Engineering, Industrial Engineering, Information Technology, Telecommunications, Cybersecurity, or related technical field. • 3+ years of hands-on experience working with IoT, embedded systems, connected devices, industrial technology, networking, product testing, hardware/software systems, or related technical environments.

• Hands-on experience testing or assessing IoT hardware, gateways, controllers, field-deployed devices, industrial communications, cellular or wireless connectivity, PLC/IPC-connected equipment, or embedded systems.

• Experience performing IoT/connected-device testing, including identifying vulnerabilities or security weaknesses and documenting findings.

• Strong understanding of TCP/IP networking, DNS, routing, firewalls, NAT, gateways, LAN communications, cellular networks, and wireless technologies.

• Experience with IoT or industrial protocols and services such as NTP, HTTP/HTTPS, AMQP/AMQPS, FTP/SFTP, TFTP, SSH, Telnet, MQTT, Modbus, OPC UA, or similar technologies.

• Experience with device configuration, firmware and software updates, network and protocol testing, packet capture and analysis, device connectivity, and troubleshooting hardware/software integrations.

• Understanding of IoT security concepts including device authentication, access control, encryption, secure communications, vulnerability management, and secure device deployment.

• Experience working with Microsoft Azure-connected product environments; familiarity with AWS and/or GCP is preferred.

• Experience with network, protocol, device, or security testing tools such as Nmap, Wireshark/packet capture tools, Burp Suite, OWASP ZAP, firmware analysis tools, protocol analyzers, or similar technologies.

• Familiarity with IoT, product security, or industrial security standards and practices, including IEC 62443, OWASP, NIST, or similar frameworks.

• Ability to communicate technical findings clearly to product engineers, architects, technical teams, cybersecurity stakeholders, and customer-facing teams.

• Strong analytical, troubleshooting, problem-solving, organizational, and written/verbal communication skills.

Nice to Have Skills & Experience:

• At least one relevant cybersecurity certification such as GICSP, GRID, GPEN, GWAPT, OSCP, PNPT, CSSLP, Security+, AZ-500, or similar practical security certification.

• Experience testing commercial IoT products, customer-facing connected devices, industrial equipment integrations, SaaS-connected hardware, or field-deployed product technologies.

• Experience with 3D TRASAR Controller platforms, PLC solutions, IPC-connected equipment, cellular gateways, wireless devices, controllers, end nodes, data historians, or customer industrial control system integrations.

• Experience with firmware analysis, hardware interfaces, embedded Linux or Windows IoT, secure firmware updates, device identity, device registration, and secure provisioning processes.

• Experience with Azure IoT, Azure security services, cloud-native security tooling, containerized services, Kubernetes-connected platforms, or identity-based cloud controls.

• Experience supporting customer security discussions, security questionnaires, technical product security reviews, and remediation planning for commercial products.

• Experience developing reusable security guidance, testing playbooks, deployment security standards, finding templates, risk-rating methods, and remediation validation procedures.

• Ability to influence without authority and drive practical security improvements across globally distributed product, engineering, support, and customer-facing teams.