IoT Security Engineer

Insight Global; Eagan (MN); On-site; USD 140,000 - 190,000; Full time

Job summary

Insight Global is seeking an experienced Security Embedded Firmware Engineer to define secure requirements and drive the development of secure IoT devices and backend-connected components. You will implement secure-by-design firmware, enable secure OTA updates, and lead vulnerability remediation across embedded software.

Responsibilities include threat modeling, secure code reviews, and integrating security checks into CI/CD pipelines.

Qualifications

• Proven experience in C/C++ for embedded firmware development.
• Experience applying secure software development practices (secure coding, code review, remediation).
• Experience with embedded RTOS or bare-metal development and security for constrained devices.

Responsibilities

• Define secure system requirements with stakeholders and security teams.
• Design, develop, and test secure firmware and IoT software with secure-by-design principles.
• Lead vulnerability triage, remediation, and release coordination for embedded components.
• Perform threat modeling, security testing, and secure CI/CD integration.

Skills

C/C++

Embedded firmware

Secure software development

ARM microcontrollers

Vulnerability management

Secure communication protocols

Threat modeling

Communication skills

Education

Bachelor’s degree in Computer Engineering/CS/Electrical Engineering/Cybersecurity

Job description

Job Description

• Partner with stakeholders, product teams, and security teams to define secure system requirements for embedded firmware, IoT edge devices, gateways, and backend-connected components.
• Design, develop, and test secure firmware and IoT software using secure-by-design principles, including authentication, authorization, secure communications, encryption, logging, and secure update mechanisms.
• Implement hardware security controls including secure elements, TPMs, hardware root of trust, and JTAG/SWD lockdown.
• Apply memory safety practices and compiler hardening techniques to mitigate common C/C++ vulnerabilities.
• Develop secure device provisioning workflows including key injection, certificate enrollment, and device identity lifecycle management.
• Integrate secure cloud to device communication patterns such as mutual TLS, token based authentication, certificate rotation, and secure onboarding using cloud to device security.
• Lead vulnerability triage, root-cause analysis, remediation planning, patch development, verification, and release coordination for embedded and IoT software components.
• Perform and support threat modeling, secure code reviews, static and dynamic analysis, dependency scanning, and security testing throughout the software development lifecycle.
• Participate in embedded incident response, coordinated disclosure, and rapid hotfix development for fielded devices.
• Design and implement secure OTA update pipelines including signing, encryption, rollback protection, A/B partitioning, and update integrity validation using secure OTA lifecycle best practices.
• Integrate SAST, DAST, dependency scanning, and firmware specific security checks into CI/CD pipelines using secure CI/CD pipelines principles.
• Collaborate with cross-functional teams, including hardware, software, product management, quality, regulatory, and external partners, to deliver secure connected products.
• Stay current with cybersecurity standards, secure development practices, emerging vulnerabilities, tools, and techniques relevant to embedded systems and industrial IoT environments.

Skills and Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, Cybersecurity, or a similar technical degree.
• 5 or more years’ experience in software or firmware development in a fast-moving product development environment.
• 3 or more years working in C or C++ for embedded firmware development.
• Experience applying secure software development practices, including secure coding, code review, vulnerability remediation, and security defect management.
• Experience with embedded RTOS or bare-metal development and security considerations for constrained devices.
• Experience with serial communication protocols, such as UART, SPI, and I2C, and secure communication concepts for connected systems.
• Experience with ARM-based microcontrollers, such as Microchip, NXP, Silicon Labs, or STMicroelectronics.
• Experience with vulnerability management processes, CVE analysis, SBOM usage, dependency scanning, penetration test findings, and remediation verification.
• Experience with cybersecurity frameworks or secure development standards such as NIST SSDF, IEC 62443, ISO 27001, OWASP, or secure product lifecycle practices.
• Experience supporting embedded firmware platforms, board support package development, secure boot, secure storage, cryptographic services, or firmware update mechanisms.
• Experience in one or more of the following areas: bootloaders, embedded file systems, Linux, CAN Bus, Modbus RTU, Modbus TCP, network security, device identity, or certificate management.
• Experience with Agile development methodologies and integrating security activities into sprint planning, backlog management, release readiness, and defect triage.
• Initiative and ability to work independently and as a member of a multi-disciplinary team while managing multiple security, development, or remediation priorities.
• Strong communication skills, both verbal and written, with the ability to clearly explain technical security risks, remediation plans, and release impacts to technical and non-technical stakeholders.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].