About the role

ioXt is seeking an IoT Security Engineer to serve as a technical subject matter expert for its connected product security programs. This person will develop and improve security requirements, assess emerging risks, and help advance the tools and processes used to evaluate connected products.

The IoT Security Engineer will work with manufacturers, testing laboratories, regulators, cybersecurity administrators, and industry working groups. The role calls for someone who can investigate technical issues, guide collaborative work, and turn complex security questions into practical recommendations.

Responsibilities

• Serve as a subject matter expert on IoT product security, providing technical expertise and representation in internal discussions and external engagements.
• Drive the development and updates of IoT security profiles through technical workgroups, coordinating stakeholder input, milestones, and deliverables while ensuring requirements are clear and testable.
• Review product architectures, threat models, security assessments, and test results. Investigate or validate significant findings when needed.
• Assess newly reported vulnerabilities and emerging threats, determine their relevance to ioXt programs, and coordinate recommendations for addressing them.
• Work with manufacturers, laboratories, and other stakeholders to clarify requirements and support consistent security evaluations.
• Contribute to improvements in ioXt’s cybersecurity program, including technical guidance, evaluation processes, and supporting platform capabilities.
• Design, prototype, or guide the development of tools and automation that improve the consistency and efficiency of security testing and evaluation.
• Lead technical working groups and build consensus on security requirements and testing approaches.
• Write clear technical requirements, assessment guidance, and recommendations for technical and nontechnical audiences.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, Electrical Engineering, or a related technical field.
• Strong understanding of connected product architecture across embedded devices, firmware, applications, cloud services, and network communications, with deeper expertise in at least one of these areas.
• Experience with threat modeling, security architecture reviews, vulnerability assessment, or hands-on security testing.
• Knowledge of common IoT security controls, including device identity, authentication, cryptography, secure boot, software integrity, secure updates, and vulnerability management.
• Ability to analyze technical documentation, code or firmware findings, and test evidence to reach well-supported conclusions.
• Ability to write security requirements and test criteria that can be applied consistently across products.
• Experience using a programming or scripting language, such as Python or C/C++, for security analysis, prototyping, or workflow automation.
• Familiarity with wireless and IoT communications, such as Wi-Fi, Bluetooth, and other connected-device protocols.

Preferred Qualifications

• Strong experience in cybersecurity, product security, security engineering, or a related field, including work with connected or embedded products.
• Strong analytical judgment and the ability to prioritize issues according to risk and practical impact.
• Experience collaborating across organizations and leading productive technical discussions.
• Strong technical writing and presentation skills.
• Work with security standards, certification programs, conformity assessment, or testing laboratories.
• Familiarity with NIST IoT guidance and other connected product security frameworks.
• Experience developing security assessment tools or improving technical workflows.