Security Engineer

Join Boardwalk IG Management LLC in Costa Mesa, CA (onsite) as an IoT Security Engineer focused on connected product security programs. You will act as a technical subject matter expert, shaping security requirements, evaluating risks and assessments, and helping improve the tools and workflows used to test and evaluate products. Salary range: USD 140,000 - 160,000 per year.

Responsibilities

• Serve as a subject matter expert on IoT product security, providing technical expertise and representing the team in internal discussions and external engagements.
• Drive development and updates of IoT security profiles through technical workgroups, coordinating stakeholder input, milestones, and deliverables while keeping requirements clear and testable.
• Review product architectures, threat models, security assessments, and test results; investigate or validate significant findings when needed.
• Assess newly reported vulnerabilities and emerging threats, determine relevance to ioXt programs, and coordinate recommendations for addressing them.
• Partner with manufacturers, testing laboratories, and other stakeholders to clarify requirements and support consistent security evaluations.
• Contribute to improvements in ioXt’s cybersecurity program, including technical guidance, evaluation processes, and supporting platform capabilities.
• Design, prototype, or guide development of tools and automation to improve consistency and efficiency of security testing and evaluation.
• Lead technical working groups and build consensus on security requirements and testing approaches.
• Write clear technical requirements, assessment guidance, and recommendations for both technical and nontechnical audiences.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, Electrical Engineering, or a related technical field.
• Strong understanding of connected product architecture across embedded devices, firmware, applications, cloud services, and network communications, with deeper expertise in at least one area.
• Experience with threat modeling, security architecture reviews, vulnerability assessment, or hands-on security testing.
• Knowledge of common IoT security controls, including device identity, authentication, cryptography, secure boot, software integrity, secure updates, and vulnerability management.
• Ability to analyze technical documentation, code or firmware findings, and test evidence to reach well-supported conclusions.
• Ability to write security requirements and test criteria that can be applied consistently across products.
• Experience using a programming or scripting language such as Python or C/C++ for security analysis, prototyping, or workflow automation.
• Familiarity with wireless and IoT communications such as Wi-Fi, Bluetooth, and other connected-device protocols.

Preferred Qualifications

• Strong experience in cybersecurity, product security, security engineering, or a related field, including work with connected or embedded products.
• Strong analytical judgment and ability to prioritize issues based on risk and practical impact.
• Experience collaborating across organizations and leading productive technical discussions.
• Strong technical writing and presentation skills.
• Work with security standards, certification programs, conformity assessment, or testing laboratories.
• Familiarity with NIST IoT guidance and other connected product security frameworks.
• Experience developing security assessment tools or improving technical workflows.

Key Technologies

• Python
• C/C++
• Wi-Fi
• Bluetooth

About the Role

You will serve as a technical subject matter expert for Boardwalk IG Management LLC’s connected product security programs. The role focuses on developing and improving security requirements, assessing emerging risks, and advancing tools and processes used to evaluate connected products. You will coordinate with manufacturers, testing laboratories, regulators, cybersecurity administrators, and industry working groups, investigate technical issues, and translate complex security questions into practical recommendations.