5 - Senior Software Engineer

Skills

Position Overview:

We are seeking a highly skilled and motivated IoT / Embedded Security Engineer to join our team. The ideal candidate must have a strong background in IoT / embedded systems security, with a proven track record in identifying vulnerabilities and implementing robust security measures.

Roles and Responsibilities:

• Conduct security assessments and risk analysis of embedded medical devices.
• Develop and implement security protocols and solutions for medical devices.
• Design and execute penetration testing and vulnerability assessments.
• Research and stay updated on emerging threats, vulnerabilities, and security trends in IoT and embedded systems.
• Collaborate with cross-functional teams to integrate security measures into the development lifecycle of products.
• Provide technical guidance and support to internal teams on security best practices.
• Participate in the design and architecture of secure IoT and embedded systems.

Mandatory Skills:

• Bachelor's or Master's degree in Electrical Engineering, Computer Science or Electronic field.
• Proven experience (5 years) in IoT and embedded systems security.
• Strong knowledge of IoT protocols (e.g., UART, I2C, JTAG, MQTT, CoAP, HTTP) and embedded system architecture
• Experience with reverse engineering ARM/MIPS/x86 code architecture.
• Hands on with hardware attacks such as PCB reversing, Component identification, Side channel attacks, memory extraction methods.
• Knowledge of radio frequency (RF) protocols and related security implications such as BLE, WIFI, LoRa, DSP, SDR, etc.
• Understanding of industrial IoT (IIoT) security considerations.
• Experience with various hardware security assessment tools/frameworks.
• Familiarity with hardware security concepts such as secure boot, encryption, and secure firmware updates.
• Proficiency in programming languages commonly used in embedded systems (C/C++, Python).
• Proactive, problem-solver and the ability to work independently and within a team.

Good to Have:

• Understanding of cryptographic algorithms and protocols.
• Knowledge of exploit development techniques, buffer overflows, and other memory corruption vulnerabilities applicable to embedded systems.
• Knowledge of secure coding practices and principles specific to embedded systems, including memory management and input validation.
• Familiarity with regulatory compliance and standards in IoT security.
• Any certification in IoT security, Embedded device security or similar, is a plus.