Product Security Engineer (Embedded / IoT)

DestroSolutions; München; Hybrid; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

DestroSolutions seeks a security engineer with focus on embedded and IoT products to perform threat modelling and security assessments across the product lifecycle, including risk analysis and secure design reviews.

You will lead firmware analysis, protocol testing, and hardware-level reviews, and define secure development and vulnerability disclosure practices for customers while mapping findings to IEC 62443 and EU CRA across sectors.

Qualifikationen

• 3+ years in product, embedded or IoT security.
• Firmware reverse engineering and secure-boot / crypto fundamentals.
• Familiarity with IEC 62443, EU CRA or equivalent regulatory regimes.
• Clear technical writing — your reports go to engineering leadership.

Aufgaben

• Perform threat modelling and security assessments on embedded and IoT products.
• Run firmware analysis, protocol testing and hardware-level review.
• Define secure development and vulnerability disclosure practices for customers.
• Map findings to EU CRA, IEC 62443 and sector-specific requirements.

Kenntnisse

Threat modelling

Embedded security

IoT security

Firmware analysis

Reverse engineering

Secure-boot

Crypto fundamentals

Jobbeschreibung

• Perform threat modelling and security assessments on embedded and IoT products
• Run firmware analysis, protocol testing and hardware-level review
• Define secure development and vulnerability disclosure practices for customers
• Map findings to EU CRA, IEC 62443 and sector-specific requirements

What we need from you

• 3+ years in product, embedded or IoT security
• Firmware reverse engineering and secure-boot / crypto fundamentals
• Familiarity with IEC 62443, EU CRA or equivalent regulatory regimes
• Clear technical writing — your reports go to engineering leadership

Nice to have

• Robotics or medical-device experience
• CVE credits or published research
• Hardware lab experience (JTAG, side-channel, fault injection)

How this hire runs

• 01 Application received

  We read every application ourselves — no keyword filter.

• 02 Screening

  A hiring engineer reviews your experience against the role. Within 5 working days.

• 03 Intro call

  30 minutes with the hiring manager: your work, our roadmap, mutual fit.

• 04 Technical deep dive

  A practical, role‑specific session on real problems. No unpaid take‑home marathons.

• 05 Decision

  Offer or a clear, written no — always with a reply, never silence.