IoT & Embedded Security Researcher

BGC Group Pte Ltd; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

The Security Researcher role at BGC Group Pte Ltd focuses on security research, vulnerability discovery, and evaluation across IoT, embedded, networking, mobile, cloud, and software platforms. You will identify weaknesses and develop PoC demonstrations.

You will document findings, communicate with clients and stakeholders, and contribute to certifications and compliance assessments, using tools like Burp Suite, Wireshark, Nmap, Ghidra, and IDA Pro.

Qualifications

• Understanding of networking, operating systems, and core cybersecurity concepts.
• Experience in security testing, reverse engineering, vulnerability research, CTFs, bug bounty programmes, academic research, or personal security projects.
• Strong analytical and problem-solving skills, with the ability to independently investigate technical security issues.
• Strong technical writing and communication skills, including the ability to explain findings to both technical and non-technical stakeholders.

Responsibilities

• Conduct security research and security assessments across IoT, embedded, networking, mobile, cloud, and software platforms.
• Perform penetration testing using black-box, grey-box, and white-box methodologies.
• Identify, analyse, and validate vulnerabilities through reverse engineering, fuzzing, protocol analysis, and proof-of-concept development.
• Develop security testing methodologies, tools, and automation to enhance assessment capabilities.
• Conduct root cause analysis and document technical findings.
• Prepare clear technical reports and communicate findings to clients, vendors, and stakeholders.

Skills

Networking knowledge

Cybersecurity concepts

Analytical thinking

Technical writing

Tools

Burp Suite

Wireshark

Nmap

Ghidra

Binwalk

Frida

IDA Pro

Job description

The Security Researcher role at BGC Group Pte Ltd focuses on security research, vulnerability discovery, and evaluation across IoT, embedded, networking, mobile, cloud, and software platforms. You will identify weaknesses and develop PoC demonstrations.

You will document findings, communicate with clients and stakeholders, and contribute to certifications and compliance assessments, using tools like Burp Suite, Wireshark, Nmap, Ghidra, and IDA Pro.