Hardware Security

IOT Hardware Cyber Security

Experience Level: 4-9 Years

About US:

SPIRO is a Time 100 Influential Company 2024. Our mission is to accelerate the access of affordable, clean energy technology in the mobility sector through excellent customer service and continued agility. Currently building manufacturing and assembling facilities, SPIRO will be the first company to manufacture e-bikes and batteries in Africa, helping to solve import-export imbalances, unlocking economic growth and sustainable development. SPIRO is the largest EVs company in Africa and is uniquely focused on Africa’s clean industrialization through e-mobility technologies. Designed around swappable batteries and connected to SPIRO ’s extensive charging infrastructure, our different motorcycle models deliver clean transport built-for-purpose to address local market challenges.

Job Summary:

Key Responsibilities:

Hardware and IoT Security:

• Develop and implement security strategies for IoT devices, networks, and hardware components.
• Conduct risk assessments and vulnerability testing on IoT systems and hardware.
• Ensure the integrity and confidentiality of IoT data through robust security measures.
• Implement security measures in hardware design and development processes.

Vulnerability Assessment/Penetration Testing (VA/PT):

• Perform regular VA/PT to identify and mitigate security vulnerabilities in hardware and IoT systems.
• Create detailed reports outlining findings and provide actionable recommendations.
• Collaborate with development teams to remediate vulnerabilities.

Ethical Hacking:

• Conduct ethical hacking exercises to simulate potential cyberattacks on hardware and IoT systems.
• Identify and exploit security weaknesses to improve organizational defenses.
• Stay updated on the latest hacking techniques and trends.

Embedded System Security:

• Design and implement security measures for embedded systems.
• Perform security assessments and penetration tests on embedded devices.
• Ensure compliance with industry standards and best practices for embedded security.

Compliance and Standards:

• Ensure compliance with ISO 21434, NIST, ISO 27001, GDPR, ISA/IEC 62443, and other relevant frameworks.
• Conduct regular audits to maintain compliance with industry standards.
• Develop and implement policies and procedures to meet regulatory requirements.

Qualifications:

• Bachelor’s degree in Computer Science/Information Security, or related field.
• 4-8 years of experience in cybersecurity with a focus on Hardware and IoT security, VA/PT, ethical hacking, AI tools, blockchain, and embedded system security.
• Relevant certifications such as CISA/CISM, CEH/CISSP/OSCP are preferred.

Skills and Competencies:

• Hands-on experience in the technologies and familiarity with CAN bus data distribution.
• Experience with IoT security, blockchain technology, and embedded systems security.
• Strong analytical and problem-solving skills.
• Excellent communication and report-writing abilities.
• Ability to work independently and as part of a team.
• Good to have experience in embedded system software secure architecture (e.g., TrustZone, OpenSSL, OP-TEE, Crypto engines).
• Familiarity with device security concepts such as Secure boot (using HSM, TPM, etc.).
• Understanding of threats/vulnerabilities of various ECUs and their impact on vehicle security (Gateway, Telematics, Inverter, ADAS, etc.).

Additional Requirements:

• Share HackerRank credentials or equivalent coding assessment scores if available.
• Showcase relevant projects undertaken and research papers published.
• Strong knowledge of embedded system security.