{"id":3930034,"url":"https://alion.io/job/arrow-electronics-senior-security-engineer-iot","title":"Senior Security Engineer - IOT","company":{"id":1757520,"name":"Arrow Electronics","domain":"arrow.com","url":"https://alion.io/company/arrow-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":61,"open_postings":117,"ghost_share":0.726,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ahmedabad, India","Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Ghidra","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"QEMU","optional":false},{"name":"Radare2","optional":false},{"name":"SBOM","optional":false}],"status":"live","first_seen_at":"2025-04-10T00:00:00Z","employer_posted_date":"2025-04-10","last_verified_at":"2026-11-08T00:23:30Z","board_verified":true,"closed_at":null,"days_open":577,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":577},"description":"Position:\nSenior Security Engineer - IOTJob Description:\nExperience:\n2-6 years of relevant experience in system security, embedded systems, and vulnerability assessments.\nKey Skills:\nFirmware Analysis Tools: Expertise in using firmware analysis tools such as Ghidra, Binwalk, and Radare2 for static and dynamic analysis of firmware images.\n\nEmbedded Linux Platforms: In-depth knowledge of embedded Linux, Yocto, and OpenWRT platforms for secure firmware and OS testing.\n\nSecure Boot & Firmware Update Mechanisms: Proficiency in testing secure boot processes and firmware update mechanisms, ensuring integrity and authenticity.\n\nOS Hardening & Security Configurations: Strong understanding of OS hardening techniques and security configurations to mitigate threats and enhance system integrity.\n\nVulnerability Assessment & CVE Analysis: Extensive experience with vulnerability assessment frameworks and CVE analysis, identifying and addressing security vulnerabilities in embedded systems.\n\nDebugging & Emulation Tools: Proficient in using debugging tools and emulators such as QEMU to analyze embedded system behavior.\n\nSBOM & Secure Update Protocols: Familiarity with SBOM (Software Bill of Materials), patch management, and secure update protocols to ensure safe software deployments.\n\nFirmware Reverse Engineering: Expertise in performing reverse engineering of firmware images to detect vulnerabilities and potential exploits.\n\nPenetration Testing Frameworks: Experience using penetration testing frameworks like Metasploit, Kali Linux, and custom tools for system vulnerability testing.\n\nCustom Test Case Development: Ability to develop and execute custom test cases to simulate real-world attack scenarios and identify potential risks in embedded systems.\n\nLeadership & Mentoring: Strong leadership skills with a proven track record of mentoring junior engineers and guiding teams in advanced security testing methodologies.\n\nTechnical Writing & Reporting: Excellent technical writing skills, including the ability to produce clear, concise, and detailed reports on security findings and risk assessments.\n\nProactive Security Risk Mitigation: Proactive in identifying and mitigating security risks within embedded systems, ensuring the implementation of security best practices.\n\nResponsibilities:\nLeadership in Security Testing: Lead system-level Vulnerability Assessment and Penetration Testing (VAPT) for firmware, operating systems, and embedded software, ensuring thorough security evaluations.\n\nTest Plan Development & Execution: Develop and implement comprehensive test plans for secure update and patch validation, ensuring security fixes are applied correctly and without introducing new risks.\n\nFirmware Static & Dynamic Analysis: Conduct detailed static and dynamic analysis of firmware images using tools like Ghidra, Binwalk, and Radare2 to identify potential vulnerabilities.\n\nSecure Boot & Root of Trust Validation: Validate secure boot implementations and hardware root of trust to ensure system integrity and protection from malicious code injection.\n\nOS Hardening & Access Control Testing: Test OS hardening configurations and secure access control mechanisms to strengthen system defenses against unauthorized access and exploitation.\n\nVulnerability Identification & Classification: Identify and classify vulnerabilities and misconfigurations in embedded systems, following industry standards such as CVSS for risk assessment and remediation prioritization.\n\nCollaboration with Compliance & Engineering: Work closely with compliance and engineering teams to prioritize remediation efforts, ensuring that vulnerabilities are addressed effectively.\n\nCustom Attack Simulations: Develop and execute custom test cases to simulate real-world attack scenarios and evaluate the system's resilience against cyber threats.\n\nRollback & Patch Management Testing: Oversee testing of rollback and patch management procedures, ensuring that system updates do not compromise security or functionality.\n\nMentoring & Knowledge Sharing: Mentor junior engineers in security testing methodologies, sharing knowledge on advanced techniques and tools for improving system security testing processes.\n\nCVE Monitoring & Testing Updates: Monitor relevant CVE feeds, integrating new vulnerabilities and security patches into testing procedures to ensure up-to-date protection.\n\nReporting & Risk Assessments: Provide detailed technical reports and risk assessments to stakeholders, outlining identified vulnerabilities, potential impact, and recommended mitigations.\n\nRegulatory Compliance: Ensure that all testing activities align with industry standards, including RED 18031 compliance, and adhere to relevant regulatory frameworks.\n\nSecure Lab Environment Maintenance: Maintain a secure lab environment for all system testing activities, ensuring that testing procedures are conducted in a controlled and isolated setting.\n\nQualifications & Certifications:\nEducation: Bachelor's or Master’s degree in Cybersecurity, Embedded Systems, Computer Engineering, or a related field.\n\nCertifications (Preferred):\nOSCP (Offensive Security Certified Professional)\n\nOSCE (Offensive Security Certified Expert)\n\nGXPN (GIAC Exploit Researcher and Advanced Penetration Tester)\n\nEquivalent certifications in ethical hacking, penetration testing, or embedded system security are also highly valued.\n\nIndustry Standards Familiarity: Familiarity with security frameworks such as ISO/IEC 62443, RED 18031, and IoT security frameworks.\n\nWhy Join Us?\nOpportunity to work with cutting-edge automation technologies in a collaborative and innovative environment.\n\nCompetitive salary and benefits package.\n\nCareer growth opportunities in a fast-paced and dynamic industry.\n\nA strong focus on work-life balance and employee well-being.\n\nLocation:\nIN-GJ-Ahmedabad, India-Ognaj (eInfochips)Time Type:\nFull timeJob Category:\nEngineering Services","description_format":"text","description_chars":5915,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wholesale","IT Resellers & VARs","Electronic Components Distribution"],"lifecycle":[{"event":"open","at":"2026-11-08T00:23:30Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.215,"p_room":0.28,"age_days":577,"expected_fill_days":7,"reasons":["conf:2","win:tail","crowd:brand"],"computed_at":"2026-11-08T02:27:39Z"},"pay":null,"html_url":"https://alion.io/job/arrow-electronics-senior-security-engineer-iot","json_url":"https://alion.io/job/arrow-electronics-senior-security-engineer-iot.json","meta":{"generated_at":"2026-11-08T02:27:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5267,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757520},"rest":"https://alion.io/mcp/rest/get_company?id=1757520"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farrow-electronics-senior-security-engineer-iot"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farrow-electronics-senior-security-engineer-iot"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farrow-electronics-senior-security-engineer-iot"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arrow-electronics-senior-security-engineer-iot\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farrow-electronics-senior-security-engineer-iot"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3930034}},{"tool":"search_jobs","arguments":{"company":"arrow.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3930034},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}