Cyber Security Engineer

We are seeking a highly technical Cyber Security Engineer to join our innovative team. You will play a critical role in supporting the ongoing development, testing, and guidance of our proprietary security portfolio that is manufactured in our onsite facilities. This role will work closely with our engineering teams who are developing, designing, and building our custom appliances.

This is a unique opportunity to apply your cybersecurity expertise in a hands-on environment where hardware meets software.

Key Responsibilities:

• Collaborate with hardware and software engineering teams to assess the security implications of open-source system architecture and custom components.


• Provide detailed feedback and guidance to developers to improve the security posture of the various platforms from ongoing development stages through production.


• Working knowledge of open-source Intrusion Detection System/Intrusion Protection System tools.


• Monitor, analyze, and respond to vulnerabilities holistically within our environment and portfolio of products.

• Experience working with scripting languages (Python, Bash).

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Electrical Engineering, or related field (or equivalent experience).


• 10+ years of experience in cybersecurity, preferably with experience in embedded systems or application security.


• Proficiency in static/dynamic code analysis tools, fuzzing, reverse engineering, and vulnerability scanners.


• Knowledge of common security frameworks (e.g., NIST, OWASP, MITRE ATT&CK).


• Strong analytical and problem-solving skills, with the ability to work cross-functionally in a fast-paced environment.

Nice to Have:

• Experience with secure boot, TPM, HSM, or custom board-level security implementations.


• Knowledge of communication protocols like SPI, I2C, UART, or CAN.


• Familiarity with secure firmware update mechanisms and hardware debugging tools (e.g., JTAG, logic analyzers).


• Certifications such as OSCP, CEH, or CISSP.