Security Analyst IoT (m/f/d)

DEKRA Digital & Product Solutions; Málaga; Híbrido; EUR 40.000 - 60.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Permanent contract

Flexible work model

Restaurant vouchers

Nursery vouchers

Well Hub benefits

Transport benefits

Medical health insurance

English lessons

Snacks and coffee

Referral programme

KUDOS awards

Career development

Descripción de la vacante

DEKRA Digital & Product Solutions in Málaga, Spain, is seeking a Security Engineer to join its Cybersecurity Team, focusing on IoT and embedded systems.

You will assess hardware, firmware, and communication protocols, prepare detailed vulnerability reports, and collaborate with engineering, compliance, and product teams to implement secure designs.

A 1-year hands-on IoT/embedded experience and English proficiency are required; the role offers a permanent contract and flexible work options.

Formación

• Bachelor’s degree in Electronics, Telecommunications, Electronic Systems, or Computer Engineering.
• At least 1 year hands-on experience with IoT technologies, embedded systems, microcontrollers, sensors, actuators, or related fields.
• Practical knowledge and experience with MQTT, Wi‑Fi, Zigbee, BLE, or similar.
• Familiarity with RTOS or embedded Linux-based systems.
• Familiarity with firmware development or analysis (C/C++), hardware diagnostics, and troubleshooting.
• Excellent analytical, organizational, and problem-solving skills.
• Strong written and verbal communication skills in English.
• Ability to collaborate effectively in international and multidisciplinary teams.

Responsabilidades

• Perform in-depth evaluations and security assessments of IoT and embedded systems.
• Analyze hardware, firmware, and communication protocols (MQTT, Wi‑Fi, Zigbee, BLE) to detect vulnerabilities.
• Collaborate with cross-functional teams to ensure secure implementation and design of IoT solutions.
• Prepare detailed reports clearly documenting vulnerabilities, risk assessments and mitigations.
• Stay current with emerging IoT technologies, communication protocols, and security practices.

Conocimientos

IoT technologies

Embedded systems

Microcontrollers

Sensors & actuators

MQTT

Wi‑Fi

Zigbee

BLE

RTOS

Embedded Linux

C/C++

Firmware analysis

Hardware diagnostics

Analytical thinking

English communication

Collaboration in international teams

Educación

Bachelor’s degree in Electronics, Telecommunications, Electronic Systems, or Computer Engineering

Herramientas

OSCP

CEH

Descripción del empleo

Since its foundation in 1925, the DEKRA promise has been to ensure the safety of human interaction with technology and the environment. Today, DEKRA employs around 48,000 people across more than 60 countries on all five continents.

From our world-class labs, we ensure that the technologies of tomorrow—from IoT devices and 5G connectivity to advanced software and AI—are secure, reliable, and compliant. Joining DEKRA Digital & Product Solutions means working at the forefront of Cybersecurity, Connectivity, and Digital Testing, helping the world’s biggest tech brands launch products that people can trust.

In our Cybersecurity Team, one of our goals is to identify risks and vulnerabilities in IoT devices and embedded systems to ensure secure interactions between technology and people, meeting international security standards.

What will your responsibilities be?

• Perform in-depth evaluations and security assessments of IoT and embedded systems, aligned with standards like EN18031, ETSI EN 303 645.
• Analyze hardware, firmware, and communication protocols (e.g., MQTT, Wi-Fi, Zigbee, BLE) to detect and document potential vulnerabilities and risks.
• Collaborate with cross-functional teams, including engineering, compliance, and product development, ensuring secure implementation and design of IoT solutions.
• Prepare detailed technical reports clearly documenting vulnerabilities, risk assessments and recommended mitigation measures.
• Stay current with emerging IoT technologies, communication protocols, and security practices relevant to embedded systems.

What do we expect from you?

• Bachelor’s degree in Electronics, Telecommunications, Electronic Systems, or Computer Engineering, or a closely related field.
• At least 1 year of hands-on experience with IoT technologies, embedded systems, microcontrollers, sensors, actuators, or related fields.
• Practical knowledge and experience working with communication protocols such as MQTT, Wi-Fi, Zigbee, BLE, or similar.
• Familiarity with IoT platforms, real-time operating systems (RTOS), or embedded Linux-based systems.
• Familiarity with firmware development or analysis (C/C++), hardware diagnostics, and troubleshooting.
• Excellent analytical, organizational, and problem-solving skills.
• Strong written and verbal communication skills in English.
• Demonstrated ability to collaborate effectively in international and multidisciplinary teams.

Ideally, you’ll also have:

• Understanding of cybersecurity concepts, especially regarding IoT security frameworks like OWASP IoT Top Ten.
• Experience or certifications in cybersecurity (e.g., OSCP, CEH), which are valuable but not mandatory.
• Participation in technology or IoT-focused communities or forums (e.g., Stack Overflow, GitHub, Hackaday).
• Additional language skills (German, Spanish, Chinese) would be beneficial.

What do we offer?

• Permanent contract.
• Flexible work model that allows the conciliation between personal and work life.
• Intensive summer day and every Friday of the year.
• Possibility of accessing restaurant vouchers, nursery vouchers, Well Hub or transport benefits.
• Medical Health Insurance 100% covered by the company.
• English lessons to increase your level is needed.
• Healthy snacks and free coffee in the office.
• Referral programme with financial incentives
• Employee recognition programme KUDOS awards.
• Work with leading Top-Notch customers.
• Discounts on major brands: textiles, consumer goods, electronics, travel agencies.
• Our employees have an opportunity to develop a career plan with access to different certification programs (internal and external), as well as participate in tech events within the community.