Job Description
Roles : IoT/Embedded Security Engineer
Position Overview:
- We are seeking a highly skilled and motivated IoT / Embedded Security Engineer to join our team. The ideal candidate must have a strong background in IoT / embedded systems security, with a proven track record in identifying vulnerabilities and implementing robust security measures.
Roles and Responsibilities:
- Conduct security assessments and risk analysis of embedded medical devices.
- Develop and implement security protocols and solutions for medical devices.
- Design and execute penetration testing and vulnerability assessments.
- Research and stay updated on emerging threats, vulnerabilities, and security trends in IoT and embedded systems.
- Collaborate with cross-functional teams to integrate security measures into the development lifecycle of products.
- Provide technical guidance and support to internal teams on security best practices.
- Participate in the design and architecture of secure IoT and embedded systems.
Mandatory Skills:
- Bachelor's or Master's degree in Electrical Engineering, Computer Science or Electronic field.
- Proven experience in IoT and embedded systems security.
- Strong knowledge of IoT protocols (e.g., UART, I2C, JTAG, MQTT, CoAP, HTTP) and embedded system architecture
- Experience with reverse engineering ARM/MIPS/x86 code architecture.
- Hands on with hardware attacks such as PCB reversing, Component identification,Side channel attacks,memory extraction methods.
- Knowledge of radio frequency (RF) protocols and related security implications such as BLE, WIFI, LoRa,DSP, SDR, etc.
- Understanding of industrial IoT (IIoT) security considerations.
- Experience with various hardware security assessment tools/frameworks.
- Familiarity with hardware security concepts such as secure boot, encryption, and secure firmware updates.
- Proficiency in programming languages commonly used in embedded systems (C/C++, Python).
- Proactive, problem-solver and the ability to work independently and within a team.
Good to Have:
- Understanding of cryptographic algorithms and protocols.
- Knowledge of exploit development techniques, buffer overflows, and other memory corruption vulnerabilities applicable to embedded systems.
- Knowledge of secure coding practices and principles specific to embedded systems, including memory management and input validation.
- Familiarity with regulatory compliance and standards in IoT security.
- Any certification in IoT security, Embedded device security or similar, is a plus
