IoT Security Engineer - Embedded Systems & Cloud Risk

Insight Global; Saint Paul (MN); On-site; USD 110,000 - 165,000; Full time

Job summary

Insight Global in Saint Paul, MN is seeking a hands-on IoT security tester to perform vulnerability assessments across embedded devices, gateways, edge computing, and related field-deployed systems. You will analyze device configurations, firmware, and protocols to identify weaknesses and craft remediation guidance.

The role requires 3+ years of IoT security experience, a technical degree, and the ability to communicate findings to engineering and product teams.

Qualifications

• Bachelor’s degree in a technical field and 3+ years in IoT/security testing.
• Hands-on testing of IoT hardware, gateways, field devices, and industrial equipment.
• Experience identifying vulnerabilities and documenting findings.
• Strong understanding of TCP/IP, DNS, routing, firewalls, and wireless tech.

Responsibilities

• Perform hands-on security testing and vulnerability assessments of IoT devices, connected hardware, gateways, controllers, edge devices, wireless technologies, industrial equipment, and related field-deployed systems.
• Assess the security of device configurations, communications architectures, authentication mechanisms, credential and secrets management, provisioning workflows, firmware update processes, secure boot implementations, remote access solutions, and system integrations.
• Conduct authorized security assessments of connected products and embedded systems, including hardware analysis, firmware review, protocol testing, network traffic analysis, physical access testing, and device configuration assessments.
• Evaluate device communications and network interactions across enterprise, cloud, and operational technology environments, including TCP/IP networking, DNS, routing, firewalls, network segmentation, wireless technologies, cellular communications, and common IoT or industrial protocols.
• Support security reviews of connected product ecosystems, industrial control systems, edge computing architectures, data collection platforms, operational technologies, and associated communications infrastructure.
• Utilize industry-standard security tools and methodologies to identify, validate, and document vulnerabilities across hardware, firmware, software, and network layers.
• Partner closely with engineering, product, and architecture teams to develop practical remediation strategies, secure configuration guidance, compensating controls, and risk-based mitigation plans.
• Validate security findings identified through internal assessments, third-party testing, customer inquiries, vulnerability management programs, automated scanning, product reviews, and field observations.
• Produce clear technical documentation and assessment reports detailing vulnerability impact, affected components, exploitability, business risk, remediation recommendations, and validation outcomes.
• Communicate technical findings and recommendations to engineering teams, product leaders, cybersecurity stakeholders, business partners, and customer-facing organizations.
• Participate in customer and stakeholder discussions related to product security, secure deployment practices, vulnerability management, and security program maturity.
• Contribute to the development and enhancement of product security standards, testing methodologies, secure design practices, vulnerability management processes, hardening guidance, and reusable security documentation.
• Collaborate with cloud, application, mobile, identity, and API security teams when security findings span multiple technology domains or integrated platforms.
• Monitor emerging threats, vulnerabilities, techniques, and industry trends related to embedded systems, connected devices, industrial technologies, wireless communications, and cloud-connected products.
• Promote security-by-design principles and advocate for secure product development, deployment, and lifecycle management practices throughout the organization.

Skills

IoT security

Embedded systems

Networking

Vulnerability assessment

Report writing

Education

Bachelor's degree in a relevant technical field

Tools

Nmap

Wireshark

Burp Suite

OWASP ZAP

Firmware analysis tools

Protocol analyzers

Job description

Insight Global in Saint Paul, MN is seeking a hands-on IoT security tester to perform vulnerability assessments across embedded devices, gateways, edge computing, and related field-deployed systems. You will analyze device configurations, firmware, and protocols to identify weaknesses and craft remediation guidance.

The role requires 3+ years of IoT security experience, a technical degree, and the ability to communicate findings to engineering and product teams.