Technical Lead, Device Penetration Testing
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- 4+ years of experience in embedded security testing or vulnerability assessment.
Nice to have
- Degree in Computer Engineering, Electrical Engineering, or Cybersecurity.
Full description
Landis+Gyr EMEA, formerly part of the Landis+Gyr Group, supports electricity, gas, water and thermal utilities in managing increasingly complex networks, improving operational efficiency and enabling more sustainable use of resources.
With more than 2.800 employees in 19 countries and decades of experience in critical infrastructure technology, the company provides advanced metering, network intelligence and digital solutions to utilities and infrastructure operators primarily across Europe, Middle East and Africa. As a standalone organisation, Landis+Gyr EMEA builds on long-standing customer relationships and proven technology capabilities, backed by experienced regional teams.
Role Purpose
The Security Testing Engineer (Devices) is responsible for planning and executing vulnerability, hardening, and penetration tests on Landis+Gyr’s embedded and IoT products. This includes devices running RTOS or embedded Linux, as well as components such as IoT communication modules and gateways. The role ensures that security weaknesses are identified, remediated, and verified through systematic retesting, supporting compliance with IEC 62443, CRA, and RED DA requirements.
Key Responsibilities
-
Plan, execute, and document penetration tests, vulnerability scans, and hardening assessments for embedded and IoT devices.
-
Perform firmware and hardware analysis, identifying weaknesses in authentication, encryption, or system configuration.
-
Test devices with RTOS, embedded Linux, and IoT modem components for security flaws or misconfigurations.
-
Collaborate with R&D to provide technical remediation guidance and verify fixes through structured retesting.
-
Develop and maintain testing methodologies, scripts, and test benches for repeatable assessments.
-
Support SBOM/HBOM verification and dependency risk validation for firmware components.
-
Contribute to security validation during product certification (IEC 62443, CRA, RED DA).
-
Share testing results and lessons learned with Security Architecture and DevSecOps teams to improve design and process maturity.
Required Skills & Experience
-
4+ years of experience in embedded security testing or vulnerability assessment.
-
Hands-on experience with RTOS (e.g., FreeRTOS, ThreadX) and embedded Linux environments.
-
Familiarity with IoT communication stacks and modem interfaces (e.g., NB-IoT, LTE-M, LoRa, DLMS/COSEM).