Security Testing Engineer Devices

Landis+Gyr; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Landis+Gyr is seeking a Security Testing Engineer (Devices) to plan and execute vulnerability, hardening, and penetration tests on embedded and IoT products. You will work on RTOS and embedded Linux, analyze firmware and hardware, and collaborate with R&D to verify fixes and ensure secure deployments.

The role supports certification efforts (IEC 62443, CRA, RED DA) and contributes to test methodology development, SBOM/HBOM validation, and DevSecOps alignment with Security Architecture teams.

Qualifications

• 4+ years of embedded security testing or vulnerability assessment.
• Hands-on experience with RTOS (FreeRTOS, ThreadX) and embedded Linux.
• Familiarity with IoT stacks and modem interfaces (NB-IoT, LTE-M, LoRa, DLMS/COSEM).
• Strong knowledge of network and protocol-level testing (fuzzing, packet manipulation).
• Proficiency in Burp Suite, Ghidra, Wireshark, Nmap, OpenVAS, or similar tools.
• Understanding of secure boot, firmware signing, and device provisioning mechanisms.
• Knowledge of IEC 62443 or related cybersecurity frameworks.

Responsibilities

• Plan, execute, and document penetration tests for embedded and IoT devices.
• Perform firmware and hardware analysis, identifying weaknesses in authentication and encryption.
• Test devices with RTOS, embedded Linux, and IoT modem components for security flaws.
• Collaborate with R&D to provide remediation guidance and verify fixes through retesting.
• Develop and maintain testing methodologies, scripts, and test benches for repeatable assessments.
• Support SBOM/HBOM verification and dependency risk validation for firmware components.
• Contribute to security validation during product certification (IEC 62443, CRA, RED DA).
• Share testing results with Security Architecture and DevSecOps teams to improve design and process maturity.

Skills

RTOS

Embedded Linux

IoT protocols

Fuzzing

Network testing

Burp Suite

Ghidra

Wireshark

Nmap

OpenVAS

Custom scripts

Education

Degree in Computer Engineering

Cybersecurity

Tools

Burp Suite

Ghidra

Wireshark

Nmap

OpenVAS

Custom scripts

Job description

Job Description:

Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity,gas,waterand thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company providesadvancedmetering,networkintelligenceand digitalsolutionstoutilities and infrastructure operators primarilyacross Europe,MiddleEastand Africa. As a standaloneorganisation, Landis+Gyr EMEAbuildson long-standing customer relationships and proven technology capabilities,backedby experienced regional teams.

Role Purpose

The Security Testing Engineer (Devices)is responsible forplanning and executing vulnerability, hardening, and penetration tests onLandis+Gyr’sembedded and IoT products.This includes devices running RTOS or embedded Linux, as well as components such as IoT communication modules and gateways.The role ensures that security weaknesses areidentified, remediated, and verified through systematic retesting, supporting compliance with IEC 62443, CRA, and RED DA requirements.

KeyResponsibilities

• Plan, execute, and document penetration tests, vulnerability scans, and hardening assessments for embedded and IoT devices.
• Perform firmware and hardware analysis,identifyingweaknesses in authentication, encryption, or system configuration.
• Test devices with RTOS, embedded Linux, and IoT modem components for security flaws or misconfigurations.
• Collaborate with R&D toprovidetechnical remediation guidance and verify fixes through structured retesting.
• Develop andmaintaintesting methodologies, scripts, and test benches for repeatable assessments.
• Support SBOM/HBOMverification and dependency risk validation for firmware components.
• Contribute to security validation during product certification (IEC 62443, CRA, RED DA).
• Share testing results and lessons learned with Security Architecture andDevSecOpsteams to improve design and process maturity.

RequiredSkills & Experience

• 4+ years of experience in embedded security testing or vulnerability assessment.
• Hands-on experience with RTOS (e.g.,FreeRTOS,ThreadX) and embedded Linux environments.
• Familiarity with IoT communication stacks and modem interfaces (e.g., NB-IoT, LTE-M, LoRa, DLMS/COSEM).
• Strong knowledge of network and protocol-level testing, including fuzzing and packet manipulation.
• Proficiencyin tools such as Burp Suite,Ghidra, Wireshark, Nmap, OpenVAS, or custom scripts.
• Understandingofsecureboot, firmware signing, and device provisioning mechanisms.
• Goodknowledgeof IEC 62443 or similarproduct cybersecurity frameworks.

PreferredQualifications

• Degree in Computer Engineering, Electrical Engineering, or Cybersecurity.
• Certifications such as OSCP, CEH, or GIAC GPEN.
• Experience in hardware security testing (e.g., JTAG, UART, side-channel analysis) is a plus.
• Familiarity with test automation frameworks for embedded systems.

Key Interfaces

• Internal: R&D (Firmware and Hardware), Security Architecture, Governance & Certification, QA.
• External: External test labs, penetration testing vendors, certification authorities.

SuccessIndicators

• All new and existing device platforms tested for security weaknesses within release cycles.
• Timely remediation and verification of vulnerabilities before product certification or deployment.
• Continuous improvement of test coverage, automation, and repeatability.
• Documented contribution to audit and certification evidence for CRA and IEC 62443.

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background.Were committed to shaping a better future for everyone. #EnergizeYourCareer and join us on our journey towards a greener tomorrow.