Security Testing Engineer (Devices)

Landis+Gyr EMEA; Dadri; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Landis+Gyr EMEA is seeking a Security Testing Engineer (Devices) to plan and execute vulnerability assessments on embedded and IoT products. The role focuses on RTOS and embedded Linux platforms, with testing of firmware, hardware interfaces, and authentication controls to ensure robust security before certification.

You will work with R&D and DevSecOps to remediate findings, develop repeatable test methods, and contribute to IEC 62443, CRA, and RED DA compliance.

Qualifications

• 4+ years of experience in embedded security testing or vulnerability assessment.
• Experience with RTOS (e.g., FreeRTOS, ThreadX) and embedded Linux.
• Experience with IoT security testing, networking stacks, and modem interfaces.
• Hands-on experience with security testing tools and reporting.

Responsibilities

• Plan, execute, and document penetration tests, vulnerability scans, and hardening assessments for embedded and IoT devices.
• Perform firmware and hardware analysis identifying weaknesses in authentication, encryption, or configuration.
• Test devices with RTOS, embedded Linux, and IoT modem components for security flaws.
• Collaborate with R&D to provide remediation guidance and verify fixes via retesting.
• Develop and maintain testing methodologies, scripts, and test benches.
• Support SBOM/HBOM verification and dependency risk validation for firmware components.
• Contribute to security validation during product certification (IEC 62443, CRA, RED DA).
• Share testing results with Security Architecture and DevSecOps teams to improve design and process maturity.

Skills

Embedded security testing

RTOS & Embedded Linux

IoT security testing

Fuzzing & protocol testing

Burp Suite familiarity

IEC 62443 familiarity

Crypto & secure boot concepts

Education

Degree in Computer Engineering / Cybersecurity

Tools

Burp Suite

Ghidra

Wireshark

Nmap

OpenVAS

Custom test scripts

Job description

Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity,gas,waterand thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.

With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company providesadvancedmetering,networkintelligenceand digitalsolutionstoutilities and infrastructure operators primarilyacross Europe,MiddleEastand Africa. As a standaloneorganisation, Landis+Gyr EMEAbuildson long-standing customer relationships and proven technology capabilities,backedby experienced regional teams.

Role Purpose

The Security Testing Engineer (Devices) is responsible for planning and executing vulnerability, hardening, and penetration tests on Landis+Gyr’s embedded and IoT products. This includes devices running RTOS or embedded Linux, as well as components such as IoT communication modules and gateways. The role ensures that security weaknesses are identified, remediated, and verified through systematic retesting, supporting compliance with IEC 62443, CRA, and RED DA requirements.

Key Responsibilities

• Plan, execute, and document penetration tests, vulnerability scans, and hardening assessments for embedded and IoT devices.
• Perform firmware and hardware analysis, identifying weaknesses in authentication, encryption, or system configuration.
• Test devices with RTOS, embedded Linux, and IoT modem components for security flaws or misconfigurations.
• Collaborate with R&D to provide technical remediation guidance and verify fixes through structured retesting.
• Develop and maintain testing methodologies, scripts, and test benches for repeatable assessments.
• Support SBOM/HBOM verification and dependency risk validation for firmware components.
• Contribute to security validation during product certification (IEC 62443, CRA, RED DA).
• Share testing results and lessons learned with Security Architecture and DevSecOps teams to improve design and process maturity.

Required Skills & Experience

• 4+ years of experience in embedded security testing or vulnerability assessment.
• Hands-on experience with RTOS (e.g., FreeRTOS, ThreadX) and embedded Linux environments.
• Familiarity with IoT communication stacks and modem interfaces (e.g., NB-IoT, LTE-M, LoRa, DLMS/COSEM).
• Strong knowledge of network and protocol-level testing, including fuzzing and packet manipulation.
• Proficiency in tools such as Burp Suite, Ghidra, Wireshark, Nmap, OpenVAS, or custom scripts.
• Understanding of secure boot, firmware signing, and device provisioning mechanisms.
• Good knowledge of IEC 62443 or similar product cybersecurity frameworks.

Preferred Qualifications

• Degree in Computer Engineering, Electrical Engineering, or Cybersecurity.
• Certifications such as OSCP, CEH, or GIAC GPEN.
• Experience in hardware security testing (e.g., JTAG, UART, side-channel analysis) is a plus.
• Familiarity with test automation frameworks for embedded systems.

Key Interfaces

• Internal: R&D (Firmware and Hardware), Security Architecture, Governance & Certification, QA.
• External: External test labs, penetration testing vendors, certification authorities.

Success Indicators

• All new and existing device platforms tested for security weaknesses within release cycles.
• Timely remediation and verification of vulnerabilities before product certification or deployment.
• Continuous improvement of test coverage, automation, and repeatability.
• Documented contribution to audit and certification evidence for CRA and IEC 62443.

We value and encourage diversity in our team. This position is open to all qualified candidates regardless of gender, race, age, disability, sexual orientation, or background. We're committed to shaping a better future for everyone.

#EnergizeYourCareer and join us on our journey towards a greener tomorrow.