Senior Security Engineer - IOT

Arrow Components; Ahmedabad; On-site; INR 700,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary and benefits package

Career growth opportunities

Focus on work-life balance

Job summary

A technology company in Ahmedabad is seeking a Senior Security Engineer for IoT. This role involves leading vulnerability assessments, conducting firmware analysis, and collaborating on security testing in a dynamic environment. Ideal candidates have a degree in Cybersecurity and relevant experience in system security. The position offers competitive salary and growth opportunities.

Qualifications

• 2–6 years of relevant experience in system security, embedded systems, and vulnerability assessments.
• Familiarity with security frameworks such as ISO/IEC 62443.

Responsibilities

• Lead system-level Vulnerability Assessment and Penetration Testing (VAPT).
• Develop and implement comprehensive test plans for secure updates.
• Conduct detailed static and dynamic analysis of firmware images.

Skills

Vulnerability assessments

Embedded systems

System security

Penetration testing

Education

Bachelor's or Master’s degree in Cybersecurity

Tools

Ghidra

Binwalk

Radare2

Job description

Overview

Join to apply for the Senior Security Engineer - IOT role at Arrow Components.

Job posting: Senior Security Engineer - IOT, with 2–6 years of relevant experience in system security, embedded systems, and vulnerability assessments.

Responsibilities

• Leadership in Security Testing: Lead system-level Vulnerability Assessment and Penetration Testing (VAPT) for firmware, operating systems, and embedded software, ensuring thorough security evaluations.
• Test Plan Development & Execution: Develop and implement comprehensive test plans for secure update and patch validation, ensuring security fixes are applied correctly and without introducing new risks.
• Firmware Static & Dynamic Analysis: Conduct detailed static and dynamic analysis of firmware images using tools like Ghidra, Binwalk, and Radare2 to identify potential vulnerabilities.
• Secure Boot & Root of Trust Validation: Validate secure boot implementations and hardware root of trust to ensure system integrity and protection from malicious code injection.
• OS Hardening & Access Control Testing: Test OS hardening configurations and secure access control mechanisms to strengthen system defenses against unauthorized access and exploitation.
• Vulnerability Identification & Classification: Identify and classify vulnerabilities and misconfigurations in embedded systems, following industry standards such as CVSS for risk assessment and remediation prioritization.
• Collaboration with Compliance & Engineering: Work closely with compliance and engineering teams to prioritize remediation efforts, ensuring that vulnerabilities are addressed effectively.
• Custom Attack Simulations: Develop and execute custom test cases to simulate real-world attack scenarios and evaluate the system's resilience against cyber threats.
• Rollback & Patch Management Testing: Oversee testing of rollback and patch management procedures, ensuring that system updates do not compromise security or functionality.
• Mentoring & Knowledge Sharing: Mentor junior engineers in security testing methodologies, sharing knowledge on advanced techniques and tools for improving system security testing processes.
• CVE Monitoring & Testing Updates: Monitor relevant CVE feeds, integrating new vulnerabilities and security patches into testing procedures to ensure up-to-date protection.
• Reporting & Risk Assessments: Provide detailed technical reports and risk assessments to stakeholders, outlining identified vulnerabilities, potential impact, and recommended mitigations.
• Regulatory Compliance: Ensure that all testing activities align with industry standards, including RED 18031 compliance, and adhere to relevant regulatory frameworks.
• Secure Lab Environment Maintenance: Maintain a secure lab environment for all system testing activities, ensuring that testing procedures are conducted in a controlled and isolated setting.

Qualifications & Certifications

• Education: Bachelor's or Master’s degree in Cybersecurity, Embedded Systems, Computer Engineering, or a related field.
• Certifications (Preferred):
• OSCP (Offensive Security Certified Professional)
• OSCE (Offensive Security Certified Expert)
• GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)
• Equivalent certifications in ethical hacking, penetration testing, or embedded system security are also highly valued.
• Industry Standards Familiarity: Familiarity with security frameworks such as ISO/IEC 62443, RED 18031, and IoT security frameworks.

Why Join Us?

• Opportunity to work with cutting-edge automation technologies in a collaborative and innovative environment.
• Competitive salary and benefits package.
• Career growth opportunities in a fast-paced and dynamic industry.
• A strong focus on work-life balance and employee well-being.

Location

IN-GJ-Ahmedabad, India-Ognaj (eInfochips)

Time Type

Full time

Job Category

Engineering Services

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Technology, Information and Internet

Referrals increase your chances of interviewing at Arrow Components by 2x