Senior Security Engineer - IoT & OT Innovations

Wallbox Chargers; Barcelona; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

An established industry player is on the lookout for a Security Professional to spearhead their product security team. This role involves collaborating with tech teams across hardware, software, and cloud services to ensure robust security in IoT and OT environments. You'll be responsible for developing security architectures, conducting risk assessments, and implementing security measures tailored to electric vehicle charging technologies. If you're passionate about security and eager to make a significant impact in a rapidly evolving field, this opportunity is perfect for you!

Formación

• 5+ years of experience in securing OT environments, especially in EVSE.
• Proven experience in reverse engineering methodologies for hardware.

Responsabilidades

• Develop and implement a security strategy for OT/IOT systems in EVSE.
• Lead security integration within the product development lifecycle.

Conocimientos

OT Security

Vulnerability Management

Reverse Engineering

Penetration Testing

IoT Security

Problem-Solving

Communication Skills

Herramientas

Security Testing Tools

CI/CD Pipelines

Descripción del empleo

We are seeking an experienced Security Professional to lead our product security team. In this role, you will collaborate closely with our tech teams across hardware, software, embedded systems, and cloud connectivity services.

Your responsibilities will include vulnerability management, reverse engineering, hardware and software penetration testing, and applying your extensive knowledge of IoT and OT security tools and regulations.

Role Overview :

The Security Specialist - IoT & OT will lead the development and enforcement of security architectures and strategies for IoT and OT systems. You will design robust security measures for both hardware and software, conduct comprehensive risk assessments, and focus on EVSE, IoT / OT, and cutting-edge communication technologies.

Responsibilities :

• OT Security Strategy: Develop and implement a comprehensive security strategy for OT / IOT systems specific to EVSE charging technologies, aligning with industry best practices and regulatory frameworks.
• Product Security Leadership: Lead security integration within the product development lifecycle of EVSE hardware and software solutions, from design through deployment. Ensure rigorous security standards are met in IoT, OT, and ICS systems related to electric vehicle charging infrastructure.
• Risk Assessment: Perform risk and vulnerability assessments tailored to EVSE charging systems and related IoT devices, prioritising security threats and weaknesses specific to electric vehicle ecosystems.
• Security Architecture: Assist Product Hardware and Software architecture teams to secure architectures for EVSE systems.
• Security Standards: Establish and enforce security standards and protocols that are specific to the electric vehicle charging industry, and ensure compliance with international cybersecurity regulations.
• Security Testing: Coordinate and oversee security testing activities, including but not limited to penetration testing and vulnerability scanning of EVSE products and infrastructure.
• Security Awareness: Champion a security-first culture within the product teams, emphasising the unique aspects of security in EVSE and IoT environments.
• Documentation: Maintain meticulous documentation on security practices, system configurations, incident response plans, and product development security architectures tailored to EVSE technologies.
• Familiarity with security domains of backend architecture, MQTT and IoT landscape is a must.

Requirements :

• At least 5 years of experience in securing OT environments, exposure to EVSE or related industries (automotive, industrial, defence etc.) is a big plus.
• Proven experience in reverse engineering methodologies for hardware or embedded devices.
• Experience and knowledge in one or more of the following areas: Web Application Security, Penetration Testing, Reverse Engineering.
• Experience working with embedded systems.
• Demonstrated ability in integrating security practices within CI / CD pipelines for continuous delivery and deployment is not needed, but is a plus.
• Strong problem-solving capabilities and analytical skills.
• Exceptional communication skills, adept at documenting complex technical processes in clear and concise English.