IoT Security Engineer

Insight Global; Saint Paul (MN); Presencial; USD 110 000 - 165 000; Tempo integral

Resumo da oferta

Insight Global in Saint Paul, MN is seeking a hands-on IoT security tester to perform vulnerability assessments across embedded devices, gateways, edge computing, and related field-deployed systems. You will analyze device configurations, firmware, and protocols to identify weaknesses and craft remediation guidance.

The role requires 3+ years of IoT security experience, a technical degree, and the ability to communicate findings to engineering and product teams.

Qualificações

• Bachelor’s degree in a technical field and 3+ years in IoT/security testing.
• Hands-on testing of IoT hardware, gateways, field devices, and industrial equipment.
• Experience identifying vulnerabilities and documenting findings.
• Strong understanding of TCP/IP, DNS, routing, firewalls, and wireless tech.

Responsabilidades

• Perform hands-on security testing and vulnerability assessments of IoT devices, connected hardware, gateways, controllers, edge devices, wireless technologies, industrial equipment, and related field-deployed systems.
• Assess the security of device configurations, communications architectures, authentication mechanisms, credential and secrets management, provisioning workflows, firmware update processes, secure boot implementations, remote access solutions, and system integrations.
• Conduct authorized security assessments of connected products and embedded systems, including hardware analysis, firmware review, protocol testing, network traffic analysis, physical access testing, and device configuration assessments.
• Evaluate device communications and network interactions across enterprise, cloud, and operational technology environments, including TCP/IP networking, DNS, routing, firewalls, network segmentation, wireless technologies, cellular communications, and common IoT or industrial protocols.
• Support security reviews of connected product ecosystems, industrial control systems, edge computing architectures, data collection platforms, operational technologies, and associated communications infrastructure.
• Utilize industry-standard security tools and methodologies to identify, validate, and document vulnerabilities across hardware, firmware, software, and network layers.
• Partner closely with engineering, product, and architecture teams to develop practical remediation strategies, secure configuration guidance, compensating controls, and risk-based mitigation plans.
• Validate security findings identified through internal assessments, third-party testing, customer inquiries, vulnerability management programs, automated scanning, product reviews, and field observations.
• Produce clear technical documentation and assessment reports detailing vulnerability impact, affected components, exploitability, business risk, remediation recommendations, and validation outcomes.
• Communicate technical findings and recommendations to engineering teams, product leaders, cybersecurity stakeholders, business partners, and customer-facing organizations.
• Participate in customer and stakeholder discussions related to product security, secure deployment practices, vulnerability management, and security program maturity.
• Contribute to the development and enhancement of product security standards, testing methodologies, secure design practices, vulnerability management processes, hardening guidance, and reusable security documentation.
• Collaborate with cloud, application, mobile, identity, and API security teams when security findings span multiple technology domains or integrated platforms.
• Monitor emerging threats, vulnerabilities, techniques, and industry trends related to embedded systems, connected devices, industrial technologies, wireless communications, and cloud-connected products.
• Promote security-by-design principles and advocate for secure product development, deployment, and lifecycle management practices throughout the organization.

Conhecimentos

IoT security

Embedded systems

Networking

Vulnerability assessment

Report writing

Formação académica

Bachelor's degree in a relevant technical field

Ferramentas

Nmap

Wireshark

Burp Suite

OWASP ZAP

Firmware analysis tools

Protocol analyzers

Descrição da oferta de emprego

• Perform hands-on security testing and vulnerability assessments of IoT devices, connected hardware, gateways, controllers, edge devices, wireless technologies, industrial equipment, and related field-deployed systems.
• Assess the security of device configurations, communications architectures, authentication mechanisms, credential and secrets management, provisioning workflows, firmware update processes, secure boot implementations, remote access solutions, and system integrations.
• Conduct authorized security assessments of connected products and embedded systems, including hardware analysis, firmware review, protocol testing, network traffic analysis, physical access testing, and device configuration assessments.
• Evaluate device communications and network interactions across enterprise, cloud, and operational technology environments, including TCP/IP networking, DNS, routing, firewalls, network segmentation, wireless technologies, cellular communications, and common IoT or industrial protocols.
• Support security reviews of connected product ecosystems, industrial control systems, edge computing architectures, data collection platforms, operational technologies, and associated communications infrastructure.
• Utilize industry-standard security tools and methodologies to identify, validate, and document vulnerabilities across hardware, firmware, software, and network layers.
• Partner closely with engineering, product, and architecture teams to develop practical remediation strategies, secure configuration guidance, compensating controls, and risk-based mitigation plans.
• Validate security findings identified through internal assessments, third-party testing, customer inquiries, vulnerability management programs, automated scanning, product reviews, and field observations.
• Produce clear technical documentation and assessment reports detailing vulnerability impact, affected components, exploitability, business risk, remediation recommendations, and validation outcomes.
• Communicate technical findings and recommendations to engineering teams, product leaders, cybersecurity stakeholders, business partners, and customer-facing organizations.
• Participate in customer and stakeholder discussions related to product security, secure deployment practices, vulnerability management, and security program maturity.
• Contribute to the development and enhancement of product security standards, testing methodologies, secure design practices, vulnerability management processes, hardening guidance, and reusable security documentation.
• Collaborate with cloud, application, mobile, identity, and API security teams when security findings span multiple technology domains or integrated platforms.
• Monitor emerging threats, vulnerabilities, techniques, and industry trends related to embedded systems, connected devices, industrial technologies, wireless communications, and cloud-connected products.
• Promote security-by-design principles and advocate for secure product development, deployment, and lifecycle management practices throughout the organization.

Required Skills & Experience:

Bachelor’s Degree in Computer Science, Electrical Engineering, Computer Engineering, Industrial Engineering, Information Technology, Telecommunications, Cybersecurity, or related technical field. 3+ years of hands-on experience working with IoT, embedded systems, connected devices, industrial technology, networking, product testing, hardware/software systems, or related technical environments.

Hands-on experience testing or assessing IoT hardware, gateways, controllers, field-deployed devices, industrial communications, cellular or wireless connectivity, PLC/IPC-connected equipment, or embedded systems.

Experience performing IoT/connected-device testing, including identifying vulnerabilities or security weaknesses and documenting findings.

Strong understanding of TCP/IP networking, DNS, routing, firewalls, NAT, gateways, LAN communications, cellular networks, and wireless technologies.

Experience with IoT or industrial protocols and services such as NTP, HTTP/HTTPS, AMQP/AMQPS, FTP/SFTP, TFTP, SSH, Telnet, MQTT, Modbus, OPC UA, or similar technologies.

Experience with device configuration, firmware and software updates, network and protocol testing, packet capture and analysis, device connectivity, and troubleshooting hardware/software integrations.

Understanding of IoT security concepts including device authentication, access control, encryption, secure communications, vulnerability management, and secure device deployment.

Experience working with Microsoft Azure-connected product environments; familiarity with AWS and/or GCP is preferred.

Experience with network, protocol, device, or security testing tools such as Nmap, Wireshark/packet capture tools, Burp Suite, OWASP ZAP, firmware analysis tools, protocol analyzers, or similar technologies.

Familiarity with IoT, product security, or industrial security standards and practices, including IEC 62443, OWASP, NIST, or similar frameworks.

Ability to communicate technical findings clearly to product engineers, architects, technical teams, cybersecurity stakeholders, and customer-facing teams.

Strong analytical, troubleshooting, problem-solving, organizational, and written/verbal communication skills.

Nice to Have Skills & Experience:

At least one relevant cybersecurity certification such as GICSP, GRID, GPEN, GWAPT, OSCP, PNPT, CSSLP, Security+, AZ-500, or similar practical security certification.

Experience testing commercial IoT products, customer-facing connected devices, industrial equipment integrations, SaaS-connected hardware, or field-deployed product technologies.

Experience with 3D TRASAR Controller platforms, PLC solutions, IPC-connected equipment, cellular gateways, wireless devices, controllers, end nodes, data historians, or customer industrial control system integrations.

Experience with firmware analysis, hardware interfaces, embedded Linux or Windows IoT, secure firmware updates, device identity, device registration, and secure provisioning processes.

Experience with Azure IoT, Azure security services, cloud-native security tooling, containerized services, Kubernetes-connected platforms, or identity-based cloud controls.

Experience supporting customer security discussions, security questionnaires, technical product security reviews, and remediation planning for commercial products.

Experience developing reusable security guidance, testing playbooks, deployment security standards, finding templates, risk-rating methods, and remediation validation procedures.

Ability to influence without authority and drive practical security improvements across globally distributed product, engineering, support, and customer-facing teams.