About this role
Position: Product Security- Embedded / IoT Job Description: Job Description: Product Security Engineer, Embedded / IoT Experience: 2 to 10 years Role Overview We are looking for product security professionals with hands-on experience in assessing and securing embedded systems and IoT products. The role involves performing product security assessments, conducting VAPT, developing threat models and security requirements, reviewing security controls, and supporting SSDLC activities. The selected candidate will work closely with hardware, firmware, software, and product engineering teams to identify vulnerabilities, recommend practical mitigations, and validate remediation. Key Skills Understanding of embedded product architecture, microcontrollers, processors, bootloaders, memory, storage, and embedded Linux and/or RTOS environments. Ability to interpret hardware block diagrams, relevant schematic sections, and firmware architecture. Hands-on experience assessing debug, programming, or communication interfaces such as UART, JTAG/SWD, SPI, I²C, and USB. Familiarity with device debugging, flash access, firmware acquisition, and evaluation of debug and readout protections. Experience with firmware extraction or acquisition, unpacking, filesystem analysis, configuration review, and static and/or dynamic analysis. Ability to identify hardcoded credentials, exposed secrets, insecure services, weak permissions, vulnerable components, and weaknesses in firmware update mechanisms. Experience conducting manual and tool-assisted security testing of physical devices, firmware, and exposed interfaces. Ability to validate vulnerabilities, distinguish false positives, demonstrate impact safely, and recommend relevant remediation. Working knowledge of threat modeling, attack-surface ...