IoT Security Engineer — Embedded & Cloud Safeguards

DEKRA Digital & Product Solutions; Málaga; Hybrid; EUR 42,000 - 60,000; Full time

Benefits offered by this job

Health insurance fully paid by the公司

Hybrid working options around Málaga

Meal, childcare, transport and Wellhub

Training and certification programs

English lessons

Employee referral incentives

Snacks and coffee in the office

Job summary

DEKRA Digital & Product Solutions in Málaga is seeking security engineers to evaluate IoT devices end‑to‑end, focusing on hardware, firmware, web and mobile security across ecosystems.

The role involves vulnerability analysis, cryptographic and protocol assessments, and collaboration with global customers to improve safety and compliance. Knowledge of OWASP standards and tools like Burp Suite is valued, with opportunities for growth in cybersecurity events and certifications.

Qualifications

• Bachelor’s degree in Telecommunications, Electronics, Computer Engineering, Computer Science, Cybersecurity, or a closely related field.
• 1–2 years of hands‑on experience in cybersecurity, ideally in IoT or embedded security.
• Practical knowledge of IoT and embedded systems (microcontrollers, embedded Linux, firmware) and common IoT protocols such as BLE, Wi‑Fi or MQTT.
• Basic hardware security skills: using debug interfaces (UART, JTAG/SWD) and firmware extraction/analysis (binwalk, unblob).
• Basic knowledge of web and mobile app security (OWASP Top 10, OWASP MASVS) and tools such as Burp Suite.
• Working knowledge of Linux and scripting (Python, Bash or similar).
• Excellent analytical, organizational, and problem‑solving skills.
• Strong written and verbal communication skills in English.
• Demonstrated ability to collaborate effectively in international and multidisciplinary teams.

Responsibilities

• Perform security evaluations of IoT devices and their full ecosystem (device, companion app and cloud backend) against standards such as EN 18031, ETSI EN 303 645 and OWASP ISVS.
• Analyze hardware and firmware: identify debug interfaces (UART, JTAG/SWD), extract firmware from flash memory or update packages, and review embedded Linux systems for weaknesses.
• Assess wireless and IoT communication protocols such as BLE, Wi‑Fi, Zigbee and MQTT.
• Perform penetration tests of web applications and APIs, including device web interfaces and cloud backends, following OWASP WSTG and OWASP ASVS.
• Perform security assessments of Android and iOS applications, including IoT companion apps, following OWASP MASVS/MASTG.
• Support product security certification and compliance projects under the guidance of senior team members.
• Prepare clear technical reports documenting vulnerabilities, risk ratings and mitigations, and communicate findings to international customers.
• Stay current with emerging attack techniques, tools and security practices across IoT, web and mobile.

Skills

Analytical thinking

English communication

Team collaboration

Problem solving

Education

Bachelor’s degree in Telecommunications/Electronics/CS/Cybersecurity

Tools

Burp Suite

binwalk

Ghidra

Frida

Objection

MobSF

JADX

Job description

DEKRA Digital & Product Solutions in Málaga is seeking security engineers to evaluate IoT devices end‑to‑end, focusing on hardware, firmware, web and mobile security across ecosystems.

The role involves vulnerability analysis, cryptographic and protocol assessments, and collaboration with global customers to improve safety and compliance. Knowledge of OWASP standards and tools like Burp Suite is valued, with opportunities for growth in cybersecurity events and certifications.