Tiro Security

About the Company

Tiro Security is an evolutionary response to the solution provider marketplace. Your business can come to us with your Information Security needs and we will provide you with the most comprehensive and cost effective solution. We don't stop at solely providing project outsourcing or a staffing solution. At TiroSec, we believe every company has a unique voice and process. With that in mind - we will provide a customized service that caters to the needs of your business model and company goals.

Listed Jobs

Company Name

Tiro Security

Job Title

Application Security Engineer

Job Description

**Job Title:** Application Security Engineer **Role Summary:** Lead security architecture and integration for connected device and IoT ecosystems. Own threat modeling, security assessments, and secure SDLC practices, ensuring robust protection from concept through deployment. **Expectations:** - 8+ years in product or embedded system security - U.S. citizen or green‑card holder (no visa sponsorship) **Key Responsibilities:** - Design and drive product security architecture for IoT appliances and embedded systems. - Partner with engineering, product, and operations teams to embed security in all stages of development. - Conduct threat modeling, architecture reviews, and security assessments of device and cloud‑connected systems. - Lead secure SDLC initiatives, integrating tools and processes into CI/CD pipelines. - Monitor emerging IoT threats and provide proactive mitigation guidance. **Required Skills:** - Deep knowledge of secure software development, cryptography, and hardware security principles. - Hands‑on experience with IoT protocols (MQTT, CoAP) and embedded security. - Familiarity with regulatory and industry frameworks (OWASP, NIST, EN 303‑645, ISO 27001). - Experience designing and securing IoT or connected device architectures (medical device, smart home, industrial IoT). **Required Education & Certifications:** - Relevant technical degree or equivalent experience. - Preferred certifications: CSSLP, CISSP, or SABSA. - Exposure to SBOM tools and Zero Trust design principles is a bonus.

Newport beach, United states

On site

Senior

16-10-2025