Security Engineer

Boardwalk IG Management LLC is hiring an IoT Security Engineer onsite in Costa Mesa, CA to serve as a technical subject matter expert across connected product security programs. The role focuses on building clear security requirements, evaluating risk, and improving security testing consistency through collaboration with manufacturers, labs, regulators, and industry working groups.

Key Responsibilities

• Act as a subject matter expert on IoT product security, providing technical expertise and representing security perspectives in internal discussions and external engagements.
• Develop and maintain IoT security profiles through technical workgroups by coordinating stakeholder input, milestones, and deliverables, ensuring requirements remain clear and testable.
• Review product architectures, threat models, security assessments, and test results, and investigate or validate significant findings when required.
• Evaluate newly reported vulnerabilities and emerging threats, determine relevance to ioXt programs, and coordinate recommendations for mitigation and remediation.
• Collaborate with manufacturers, testing laboratories, and other stakeholders to clarify requirements and support consistent security evaluation approaches.
• Support improvements to ioXt’s cybersecurity program, including technical guidance, evaluation processes, and platform capability support.
• Design, prototype, or guide the development of tools and automation that enhance the consistency and efficiency of security testing and evaluation.
• Lead technical working groups and build consensus on security requirements and testing approaches.
• Write clear technical requirements, assessment guidance, and recommendations tailored for both technical and nontechnical audiences.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, Electrical Engineering, or a related technical field.
• Strong understanding of connected product architecture across embedded devices, firmware, applications, cloud services, and network communications, with deeper expertise in at least one area.
• Experience with threat modeling, security architecture reviews, vulnerability assessment, or hands-on security testing.
• Knowledge of common IoT security controls, including device identity, authentication, cryptography, secure boot, software integrity, secure updates, and vulnerability management.
• Ability to analyze technical documentation, code or firmware findings, and test evidence to reach well-supported conclusions.
• Ability to write security requirements and test criteria that can be applied consistently across products.
• Experience using a programming or scripting language such as Python or C/C++ for security analysis, prototyping, or workflow automation.
• Familiarity with wireless and IoT communications, including Wi-Fi, Bluetooth, and other connected-device protocols.

Technologies

• Python
• C/C++
• Wi-Fi
• Bluetooth

Preferred Qualifications

• Strong experience in cybersecurity, product security, security engineering, or a related field, including work with connected or embedded products.
• Strong analytical judgment with ability to prioritize issues by risk and practical impact.
• Experience collaborating across organizations and leading productive technical discussions.
• Strong technical writing and presentation skills.
• Experience working with security standards, certification programs, conformity assessment, or testing laboratories.
• Familiarity with NIST IoT guidance and other connected product security frameworks.
• Experience developing security assessment tools or improving technical workflows.

Location and Compensation

• Location: Costa Mesa, CA (onsite)
• Salary: USD 140,000 - 160,000 per year

About the Role

The IoT Security Engineer will serve as a technical subject matter expert for connected product security programs. This position involves developing and improving security requirements, assessing emerging risks, and advancing tools and processes that evaluate connected products, while partnering with manufacturers, testing laboratories, regulators, cybersecurity administrators, and industry working groups.