Security Engineer - IoT Systems

We are seeking a highly skilled and motivated Security Engineer specializing in IoT Systems to join our security team. The Security Engineer will be responsible for ensuring the security of our IoT devices, networks, and systems. This role involves designing, implementing, and maintaining security measures to protect against threats and vulnerabilities specific to IoT environments. The ideal candidate will have deep knowledge of IoT security protocols, the latest security technologies, and best practices for safeguarding IoT ecosystems.

Key Responsibilities:

1. Security Architecture and Design:
   • Design and implement security architectures for IoT systems, ensuring robust protection against threats and vulnerabilities.
   • Develop and enforce security policies, standards, and guidelines specific to IoT environments.
2. Threat Analysis and Mitigation:
   • Conduct threat modeling and risk assessments to identify potential security issues in IoT systems.
   • Develop and implement mitigation strategies to address identified threats and vulnerabilities.
3. Implementation of Security Measures:
   • Integrate advanced security technologies, such as AI-driven threat detection, blockchain for secure data integrity, and hardware-based security modules (e.g., TPM, HSM).
   • Implement secure communication protocols (e.g., MQTT with TLS, CoAP with DTLS) to ensure data confidentiality and integrity.
4. Continuous Monitoring and Incident Response:
   • Deploy and manage IoT security monitoring tools, such as IoT-specific SIEM (Security Information and Event Management) systems and endpoint detection and response (EDR) solutions.
   • Develop and maintain an incident response plan for IoT security incidents, including rapid detection, containment, and remediation procedures.
5. Collaboration and Training:
   • Work closely with engineering, product management, and IT teams to ensure security is integrated into all stages of IoT product development and deployment.
   • Provide training and guidance to internal teams on IoT security best practices and emerging threats.
6. Compliance and Documentation:
   • Ensure compliance with relevant security standards and regulations, such as NIST, GDPR, HIPAA, and ISO/IEC 27001.
   • Maintain comprehensive documentation of security measures, policies, and procedures.

Qualifications:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Electrical Engineering, or a related field.
• 5+ years of experience in cybersecurity, with a focus on IoT systems security.
• Strong knowledge of IoT security protocols and standards, such as MQTT, CoAP, TLS, DTLS, and IEEE 802.15.4.
• Experience with the latest security technologies, including AI-driven threat detection, blockchain, and hardware security modules.
• Proficiency in security assessment tools and techniques, such as penetration testing, vulnerability scanning, and security audits.
• Familiarity with cloud security practices and platforms (e.g., AWS IoT, Azure IoT, Google Cloud IoT).
• Strong analytical and problem-solving skills, with a proactive approach to security.

Preferred Qualifications:

• Certifications such as CISSP, CEH, GIAC, or IoT Security Foundation Certified.
• Experience with secure boot and firmware update mechanisms for IoT devices.
• Knowledge of machine learning and AI applications in security, such as anomaly detection and predictive threat modeling.
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.