Cybersecurity Engineer (IoT Device Security Testing)

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading company in cybersecurity is seeking a Senior Cybersecurity Engineer to support IoT security assessments. The role involves conducting evaluations, penetration testing, and ensuring compliance with cybersecurity frameworks. Join a team of experts and work on cutting-edge security technologies while contributing to national cybersecurity efforts.

Benefits

Professional development opportunities

Access to state-of-the-art security testing environments

Qualifications

• Minimum 2+ years of experience in cybersecurity testing for IoT devices.
• Understanding of CLS requirements.

Responsibilities

• Conduct security evaluations for IoT devices according to CSA CLS requirements.
• Perform penetration testing and vulnerability assessments on IoT devices.
• Prepare compliance reports and security advisories for clients.

Skills

Cybersecurity

Penetration Testing

Vulnerability Analysis

Analytical Skills

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Engineering

Tools

Kali Linux

Metasploit

Burp Suite

OWASP ZAP

Ghidra

Job description

We are seeking a Senior / Cybersecurity Engineer with experience in IoT security testing to support our Cybersecurity Labelling Scheme (CLS) assessments. The candidate will work on penetration testing, and compliance assessments to ensure IoT products meet stringent cybersecurity requirements.

Key Responsibilities:

• Conduct security evaluations for IoT devices in accordance with CSA Cybersecurity Labelling Scheme (CLS) requirements.

• Perform penetration testing, vulnerability assessments, etc. on IoT devices.

• Ensure compliance with ISO/IEC 17025, CLS (IoT) and other relevant cybersecurity frameworks.

• Prepare technical documentation, compliance reports, and security advisories for IoT manufacturers and clients.

• Research emerging IoT security threats and propose innovative mitigation strategies.

• Collaborate with government agencies, regulatory bodies, and certification authorities to establish cybersecurity testing methodologies.

Minimum Requirements:

• Bachelor's degree in Cybersecurity, Computer Engineering, or a related field.

• Minimum 2+ years of experience in cybersecurity testing, penetration testing, or vulnerability analysis for embedded / IoT devices.

• Understanding of CLS requirements.

Desirable Requirements:

• Hands-on experience on one or more of the following but not limited to:

  • Protocol sniffer (Bluetooth, Zigbee, Wifi, etc)

  • Debug interfaces such as JTag, UART, etc.

  • Security testing tools (e.g., Kali Linux, Metasploit, Burp Suite, OWASP ZAP, Ghidra, etc.)

  • Software Binary Analysis

  • Mobile Apps Security (Android, iOS)

  • Simple Power Analysis and Fault Injection Attack

• Strong analytical skills and ability to assess IoT device vulnerabilities and attack surfaces.

• Certification such as CISSP, CEH, OSCP, GSEC, or equivalent cybersecurity credential is a bonus.

Why Join Us?

• Work on cutting-edge IoT security assessments and cybersecurity compliance frameworks.

• Collaborate with industry experts and government regulatory bodies.

• Access to state-of-the-art security testing environments and tools.

• Opportunities for professional development and certifications.