IoT and Embedded Systems Cybersecurity Engineer

Witekio

. Work on the security of embedded and connected products—from devices to the cloud—through consulting, audits, and implementation .

Posted 10/17/2026full-timeLyon • FranceJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity for embedded and connected products, focusing on risk assessments, threat modeling, and the implementation of security mechanisms. Proficient in conducting audits, penetration testing, and translating regulatory requirements into actionable security strategies.

Highest-signal resume keywords

Cybersecurity ExpertiseEmbedded Systems SecurityRisk Assessment and Threat ModelingPenetration TestingRegulatory Compliance Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Firmware SecuritySecure BootEncryptionVulnerability ManagementApplied CryptographyIoT SecurityPenetration Testing ToolsSecure ElementsCI/CD IntegrationThreat Modeling Techniques

Soft Skills

Verbal CommunicationWorkshop FacilitationConsultative Approach

Tools & Technologies

Embedded LinuxYoctoBuildrootAWS IoTAzure IoTGhidraBinwalkBLELoRaMTLS

Industry Keywords

Cyber Resilience ActETSI EN 303 645IEC 62443NIS2X.509 CertificatesKey Lifecycle ManagementSecurity FrameworksCryptographic FrameworksSTRIDETARA

Tech Stack

Tools & technologies

AWSAzureCloudIoTLinux

About the role

Key responsibilities & impact

Work on the security of embedded and connected products—from devices to the cloud—through consulting, audits, and implementation
Serve as the primary client contact for cybersecurity and regulatory compliance matters
Conduct risk assessments and threat modeling (STRIDE, TARA, attack trees) for IoT architectures
Audit existing systems and platforms through workshops, gap analyses, documentation, and recommendations
Perform or oversee penetration testing at all levels of the IoT stack
Advise on and lead the implementation of security mechanisms, including secure boot, chains of trust, encryption, secure storage, key and certificate management, and OTA updates
Harden BSPs and embedded Linux distributions (Yocto, Buildroot)
Secure communications and data exchanges with AWS IoT and Azure IoT cloud platforms
Integrate security into CI/CD pipelines, including SAST, SCA, SBOMs, and fuzzing
Conduct code reviews and establish vulnerability management processes
Monitor vulnerabilities and emerging threats
Translate the requirements of the Cyber Resilience Act, RED DA / EN 18031, ETSI EN 303 645, and IEC 62443 into recommendations and roadmaps
Lead workshops and training sessions for client and internal teams

Requirements

What you’ll need

Master’s degree or engineering degree (Bac+5) in computer science, cybersecurity, or engineering sciences
At least 2 years of experience in cybersecurity
Strong knowledge of firmware and embedded systems security, including secure boot, encryption, hardening, secure elements (TPM, secure element, TrustZone), and penetration testing
Experience with embedded Linux, using Yocto or Buildroot, ideally including kernel-level work
Knowledge of Zephyr or FreeRTOS is a plus
Good foundation in applied cryptography and PKI, including X.509 certificates, key lifecycle management, and mTLS
Knowledge of standard cryptographic frameworks (RGS, eIDAS, NIST SP 800-57, etc.) is a plus
Knowledge of several security frameworks and regulations, including the Cyber Resilience Act, RED, NIS2, ETSI EN 303 645, and IEC 62443
Experience with hardware/firmware penetration testing (JTAG, UART, SPI, Ghidra, binwalk) or wireless technologies (BLE, LoRa)
Fluent English, written and spoken
Excellent verbal communication skills, including workshop facilitation, a consultative approach, and the ability to explain concepts clearly to clients and internal teams

Benefits

Comp & perks

Strong technical culture with multidisciplinary teams and diverse projects
Collaborative and supportive work environment
Lunch & Learn sessions and knowledge sharing
Autonomy
Monthly company information-sharing hangouts
Witekian Days dedicated to training
Hands-on, impactful projects