Senior Cybersecurity Engineer (IoT Device Security Testing)

Ensign is hiring !

About the Role:

We are seeking a Senior / Cybersecurity Engineer with experience in IoT security testing to support our Cybersecurity Labelling Scheme (CLS) assessments. The candidate will work on penetration testing, and compliance assessments to ensure IoT products meet stringent cybersecurity requirements.

Key Responsibilities:

• Conduct security evaluations for IoT devices in accordance with CSA Cybersecurity Labelling Scheme (CLS) requirements.
• Perform penetration testing, vulnerability assessments, etc. on IoT devices.
• Ensure compliance with ISO/IEC 17025, CLS (IoT) and other relevant cybersecurity frameworks.
• Prepare technical documentation, compliance reports, and security advisories for IoT manufacturers and clients.
• Research emerging IoT security threats and propose innovative mitigation strategies.
• Collaborate with government agencies, regulatory bodies, and certification authorities to establish cybersecurity testing methodologies.

Minimum Requirements:

• Bachelor's degree in Cybersecurity, Computer Engineering, or a related field.
• Minimum 2+ years of experience in cybersecurity testing, penetration testing, or vulnerability analysis for embedded / IoT devices.
• Understanding of CLS requirements.

Desirable Requirements:

• Hands-on experience on one or more of the following but not limited to:
  • Protocol sniffer (Bluetooth, Zigbee, Wifi, etc)
  • Debug interfaces such as JTag, UART, etc.
  • Security testing tools (e.g., Kali Linux, Metasploit, Burp Suite, OWASP ZAP, Ghidra, etc.)
  • Software Binary Analysis
  • Mobile Apps Security (Android, iOS)
  • Simple Power Analysis and Fault Injection Attack
• Strong analytical skills and ability to assess IoT device vulnerabilities and attack surfaces.
• Certification such as CISSP, CEH, OSCP, GSEC, or equivalent cybersecurity credential is a bonus.

Why Join Us?

• Work on cutting-edge IoT security assessments and cybersecurity compliance frameworks.
• Collaborate with industry experts and government regulatory bodies.
• Access to state-of-the-art security testing environments and tools.
• Opportunities for professional development and certifications.