About the Role:
We are seeking a Principal / Senior / Cybersecurity Engineer with experience in IoT security testing to support our Cybersecurity Labelling Scheme (CLS) assessments. The candidate will work on penetration testing, and compliance assessments to ensure IoT products meet stringent cybersecurity requirements.
Key Responsibilities:
- Conduct security evaluations for IoT devices in accordance with CSA Cybersecurity Labelling Scheme (CLS) requirements.
- Perform penetration testing, vulnerability assessments, etc. on IoT devices.
- Prepare technical documentation, compliance reports, for IoT clients.
- Research emerging IoT security threats and propose innovative mitigation strategies.
- Collaborate with government agencies, regulatory bodies, and certification authorities to establish cybersecurity testing methodologies.
Minimum Requirements:
- Bachelor's degree in Cybersecurity, Computer Engineering, or a related field.
- Minimum 2+ years of experience in cybersecurity testing, penetration testing, or vulnerability analysis for embedded / IoT devices.
Desirable Requirements:
Hands-on experience on one or more of the following but not limited to:
- Protocol sniffer (Bluetooth, Zigbee, Wifi, etc)
- Debug interfaces such as JTag, UART, etc.
- Security testing tools (e.g., Kali Linux, Metasploit, Burp Suite, OWASP ZAP, Ghidra, etc.)
- Software Binary Analysis
- Mobile Apps Security (Android, iOS)
- Strong analytical skills and ability to assess IoT device vulnerabilities and attack surfaces.
- Certification such as CISSP, CEH, OSCP, GSEC, or equivalent cybersecurity credential is a bonus.
