Technical Lead, Device Penetration Testing

Role Purpose 

The Security Testing Engineer (Devices) is responsible for planning and executing vulnerability, hardening, and penetration tests on Landis+Gyr’s embedded and IoT products. This includes devices running RTOS or embedded Linux, as well as components such as IoT communication modules and gateways. The role ensures that security weaknesses are identified, remediated, and verified through systematic retesting, supporting compliance with IEC 62443, CRA, and RED DA requirements. 

Key Responsibilities 

• Plan, execute, and document penetration tests, vulnerability scans, and hardening assessments for embedded and IoT devices. 

• Perform firmware and hardware analysis, identifying weaknesses in authentication, encryption, or system configuration. 

• Test devices with RTOS, embedded Linux, and IoT modem components for security flaws or misconfigurations. 

• Collaborate with R&D to provide technical remediation guidance and verify fixes through structured retesting. 

• Develop and maintain testing methodologies, scripts, and test benches for repeatable assessments. 

• Support SBOM/HBOM verification and dependency risk validation for firmware components. 

• Contribute to security validation during product certification (IEC 62443, CRA, RED DA). 

• Share testing results and lessons learned with Security Architecture and DevSecOps teams to improve design and process maturity. 

Required Skills & Experience 

• 4+ years of experience in embedded security testing or vulnerability assessment. 

• Hands-on experience with RTOS (e.g., FreeRTOS, ThreadX) and embedded Linux environments. 

• Familiarity with IoT communication stacks and modem interfaces (e.g., NB-IoT, LTE-M, LoRa, DLMS/COSEM). 

• Strong knowledge of network and protocol-level testing, including fuzzing and packet manipulation. 

• Proficiency in tools such as Burp Suite, Ghidra, Wireshark, Nmap, OpenVAS, or custom scripts. 

• Understanding of secure boot, firmware signing, and device provisioning mechanisms. 

• Good knowledge of IEC 62443 or similar product cybersecurity frameworks. 

Preferred Qualifications 

• Degree in Computer Engineering, Electrical Engineering, or Cybersecurity. 

• Certifications such as OSCP, CEH, or GIAC GPEN. 

• Experience in hardware security testing (e.g., JTAG, UART, side-channel analysis) is a plus. 

• Familiarity with test automation frameworks for embedded systems. 

Key Interfaces 

• Internal: R&D (Firmware and Hardware), Security Architecture, Governance & Certification, QA. 

• External: External test labs, penetration testing vendors, certification authorities. 

Success Indicators 

• All new and existing device platforms tested for security weaknesses within release cycles. 

• Timely remediation and verification of vulnerabilities before product certification or deployment. 

• Continuous improvement of test coverage, automation, and repeatability. 

• Documented contribution to audit and certification evidence for CRA and IEC 62443.