Job Description Key Responsibilities Perform hands-on security testing and vulnerability assessments of IoT devices, connected hardware, gateways, controllers, edge devices, wireless technologies, industrial equipment, and related field-deployed systems. Assess the security of device configurations, communications architectures, authentication mechanisms, credential and secrets management, provisioning workflows, firmware update processes, secure boot implementations, remote access solutions, and system integrations. Conduct authorized security assessments of connected products and embedded systems, including hardware analysis, firmware review, protocol testing, network traffic analysis, physical access testing, and device configuration assessments. Evaluate device communications and network interactions across enterprise, cloud, and operational technology environments, including TCP/IP networking, DNS, routing, firewalls, network segmentation, wireless technologies, cellular communications, and common IoT or industrial protocols. Support security reviews of connected product ecosystems, industrial control systems, edge computing architectures, data collection platforms, operational technologies, and associated communications infrastructure. Utilize industry-standard security tools and methodologies to identify, validate, and document vulnerabilities across hardware, firmware, software, and network layers. Partner closely with engineering, product, and architecture teams to develop practical remediation strategies, secure configuration guidance, compensating controls, and risk-based mitigation plans. Validate security findings identified through internal assessments, third-party testing, customer inquiries, vulnerability management programs, automated scanning, product reviews, and field observations. Produce clear technical documentation and assessment reports detailing vulnerability impact, affected components, exploitability, business risk, remediation recommendations, and validation outcomes. Communicate technical findings and recommendations to engineering teams, product leaders, cybersecurity stakeholders, business partners, and customer-facing organizations. Participate in customer and stakeholder discussions related to product security, secure deployment practices, vulnerability management, and security program maturity. Contribute to the development and enhancement of product security standards, testing methodologies, secure design practices, vulnerability management processes, hardening guidance, and reusable security documentation. Collaborate with cloud, application, mobile, identity, and API security teams when security findings span multiple technology domains or integrated platforms.



Monitor emerging threats, vulnerabilities, techniques, and industry trends related to embedded systems, connected devices, industrial technologies, wireless communications, and cloud-connected products. Promote security-by-design principles and advocate for secure product development, deployment, and lifecycle management practices throughout the organization. Skills and Requirements - Bachelor's Degree in Computer Science, Electrical Engineering, Computer Engineering, Industrial Engineering, Information Technology, Telecommunications, Cybersecurity, or related technical field. - 3+ years of hands-on experience working with IoT, embedded systems, connected devices, industrial technology, networking, product testing, hardware/software systems, or related technical environments. - Hands-on experience testing or assessing IoT hardware, gateways, controllers, field-deployed devices, industrial communications, cellular or wireless connectivity, PLC/IPC-connected equipment, or embedded systems. - Experience performing IoT/connected-device testing, including identifying vulnerabilities or security weaknesses and documenting findings. - Strong understanding of TCP/IP networking, DNS, routing, firewalls, NAT, gateways, LAN communications, cellular networks, and wireless technologies. - Experience with IoT or industrial protocols and services such as NTP, HTTP/HTTPS, AMQP/AMQPS, FTP/SFTP, TFTP, SSH, Telnet, MQTT, Modbus, OPC UA, or similar technologies. - Experience with device configuration, firmware and software updates, network and protocol testing, packet capture and analysis, device connectivity, and troubleshooting hardware/software integrations. - Understanding of IoT security concepts including device authentication, access control, encryption, secure communications, vulnerability management, and secure device deployment. - Experience working with Microsoft Azure-connected product environments; familiarity with AWS and/or GCP is preferred. - Experience with network, protocol, device, or security testing tools such as Nmap, Wireshark/packet capture tools, Burp Suite, OWASP ZAP, firmware analysis tools, protocol analyzers, or similar technologies. - Familiarity with IoT, product security, or industrial security standards and practices, including IEC 62443, OWASP, NIST, or similar frameworks.



- Ability to communicate technical findings clearly to product engineers, architects, technical teams, cybersecurity stakeholders, and customer-facing teams. - Strong analytical, troubleshooting, problem-solving, organizational, and written/verbal communication skills. - Ability to accommodate a flexible work schedule supporting global activities.
- At least one relevant cybersecurity certification such as GICSP, GRID, GPEN, GWAPT, OSCP, PNPT, CSSLP, Security+, AZ-500, or similar practical security certification.
- Experience testing commercial IoT products, customer-facing connected devices, industrial equipment integrations, SaaS-connected hardware, or field-deployed product technologies.
- Experience with 3D TRASAR Controller platforms, PLC solutions, IPC-connected equipment, cellular gateways, wireless devices, controllers, end nodes, data historians, or customer industrial control system integrations.
- Experience with firmware analysis, hardware interfaces, embedded Linux or Windows IoT, secure firmware updates, device identity, device registration, and secure provisioning processes.
- Experience with Azure IoT, Azure security services, cloud-native security tooling, containerized services, Kubernetes-connected platforms, or identity-based cloud controls.
- Experience supporting customer security discussions, security questionnaires, technical product security reviews, and remediation planning for commercial products.
- Experience developing reusable security guidance, testing playbooks, deployment security standards, finding templates, risk-rating methods, and remediation validation procedures.
- Ability to influence without authority and drive practical security improvements across globally distributed product, engineering, support, and customer-facing teams. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment chance/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].

📌 IoT Security Engineer (Pune)
🏢 Insight Global
📍 Pune