{"id":3092828,"url":"https://alion.io/job/dekra-iot-security-analyst-mfd","title":"IoT Security Analyst (m/f/d)","company":{"id":1783764,"name":"DEKRA","domain":"dekra.com","url":"https://alion.io/company/dekra-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Campanillas, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":80000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"GitHub","optional":false},{"name":"Linux","optional":false},{"name":"Matter","optional":false},{"name":"MobSF","optional":false},{"name":"MQTT","optional":false},{"name":"Objection","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"RTOS","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Zigbee","optional":false}],"status":"live","first_seen_at":"2026-10-22T15:26:18Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-29T03:15:52Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Since its foundation in 1925, the DEKRA promise has been to ensure the safety of human interaction with technology and the environment. Today, DEKRA employs around 48,000 people across more than 60 countries on all five continents.\nFollowing our 100th anniversary in 2025, our vision remains clear and ambitious: to be the global partner for a safe, secure, and sustainable world.\nWithin our Cybersecurity Hub, we evaluate the security of connected products end to end, with a strong focus on IoT and embedded devices and their full ecosystem: hardware, firmware, wireless protocols, companion mobile apps, web interfaces and cloud backends. We collaborate with world-leading manufacturers and technology companies to identify risks and vulnerabilities and verify compliance with international security standards and certification schemes.\nYou will join a globally recognized security lab within a multidisciplinary team covering IoT/hardware, web and mobile security, working on international projects for top-tier customers. We are looking for professionals passionate about IoT and embedded security who also want to grow in web and mobile penetration testing, combining analytical thinking and creativity to help safeguard our digital world.\nWhat will your responsibilities be?\nPerform security evaluations of IoT devices and their full ecosystem (device, companion app and cloud backend) against standards such as EN 18031, ETSI EN 303 645 and OWASP ISVS.\nAnalyze hardware and firmware: identify debug interfaces (UART, JTAG/SWD), extract firmware from flash memory or update packages, and review embedded Linux systems for weaknesses.\nAssess wireless and IoT communication protocols such as BLE, Wi-Fi, Zigbee and MQTT.\nPerform penetration tests of web applications and APIs, including device web interfaces and cloud backends, following OWASP WSTG and OWASP ASVS.\nPerform security assessments of Android and iOS applications, including IoT companion apps, following OWASP MASVS/MASTG.\nSupport product security certification and compliance projects (e.g., EU Cyber Resilience Act, ETSI/EN standards, ioXt, MASA, CASA) under the guidance of senior team members.\nPrepare clear technical reports documenting vulnerabilities, risk ratings and recommended mitigations, and communicate findings to international customers.\nStay current with emerging attack techniques, tools and security practices across IoT, web and mobile.\nWhat do we expect from you?\nBachelor’s degree in Telecommunications, Electronics, Computer Engineering, Computer Science, Cybersecurity, or a closely related field.\n1-2 years of hands-on experience in cybersecurity, ideally in IoT or embedded security (professional experience, internships, research or personal projects).\nPractical knowledge of IoT and embedded systems (microcontrollers, embedded Linux, firmware) and common IoT communication protocols such as BLE, Wi-Fi or MQTT.\nBasic hardware security skills: identifying and using debug interfaces (UART, JTAG/SWD) and extracting and analyzing firmware (e.g., binwalk, unblob).\nBasic knowledge of web and mobile application security (OWASP Top 10, OWASP MASVS) and tools such as Burp Suite.\nWorking knowledge of Linux and scripting (Python, Bash or similar).\nExcellent analytical, organizational, and problem-solving skills.\nStrong written and verbal communication skills in English.\nDemonstrated ability to collaborate effectively in international and multidisciplinary teams.\nId eally, you’ll also have:\nFamiliarity with IoT security frameworks and standards such as OWASP IoT Top 10, ETSI EN 303 645 or EN 18031.\nExperience with hardware hacking tools (logic analyzer, flash programmers, SDR), reverse engineering of embedded binaries (e.g., Ghidra), RTOS or IoT ecosystems such as Zigbee, Thread or Matter.\nHands-on experience in web application and API penetration testing.\nExperience with mobile app testing tools (Frida, Objection, MobSF, jadx) and rooted/jailbroken devices.\nKnowledge of the EU Cyber Resilience Act and product security certification schemes.\nCybersecurity certifications (e.g., OSCP, eJPT, CWES, BSCP, eMAPT, or IoT/hardware-specific ones), which are valuable but not mandatory.\nParticipation in security communities, CTFs, bug bounty programs or open-source projects (e.g., GitHub, Hackaday).\nAdditional language skills (German, Spanish, Chinese) would be beneficial\nAt DEKRA we value your unique experiences, perspectives, and backgrounds. We are committed to an inclusive workplace for all team members.","description_format":"text","description_chars":4514,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Chinese","level":"All levels","optional":false},{"language":"Spanish","level":"All levels","optional":false},{"language":"German","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IoT Security","Manufacturing","Transportation & Logistics","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-22T15:26:18Z"}],"visa":[],"liveness":{"score":83,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.835,"p_room":1,"age_days":6,"expected_fill_days":21,"reasons":["conf:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/dekra-iot-security-analyst-mfd","json_url":"https://alion.io/job/dekra-iot-security-analyst-mfd.json","meta":{"generated_at":"2026-10-29T07:57:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12149,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1783764},"rest":"https://alion.io/mcp/rest/get_company?id=1783764"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdekra-iot-security-analyst-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdekra-iot-security-analyst-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdekra-iot-security-analyst-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dekra-iot-security-analyst-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdekra-iot-security-analyst-mfd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3092828}},{"tool":"search_jobs","arguments":{"company":"dekra.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3092828},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}