Information Security Engineer (Embedded / Product Security)

Information Security Engineer (Embedded / Product Security)

Role Overview

Seeking a hands-on Information Security Engineer to own security reviews, risk management, and incident response across embedded, product, and infrastructure environments. This role blends security engineering, risk & compliance oversight, and program ownership, supporting production systems in a hardware-adjacent, fast-moving environment.

The ideal candidate is comfortable operating independently, driving security initiatives end-to-end, and partnering closely with engineering teams to ensure systems are secure, compliant, and production ready.

Must-Have Qualifications

• 3+ years of experience in Security Engineering, Product Security, or DevSecOps


• Proven experience conducting security reviews, risk assessments, and vulnerability management


• Hands-on incident response experience, including investigation and remediation


• Strong experience securing Linux-based systems, applications, and networks


• Exposure to embedded, IoT, hardware-adjacent, or cyber-physical systems


• Proficiency with Python and Bash for security automation


• Experience integrating security into CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins)


• Familiarity with security and compliance frameworks (NIST 800-53/171, ISO 27001, FedRAMP, or similar)


• Experience working with security tools such as endpoint protection, IDS/IPS, firewalls, or vulnerability scanners


• Ability to operate independently, manage multiple priorities, and own initiatives end-to-end


• Strong communication and documentation skills

Nice-to-Have

• Experience securing embedded ARM platforms, Jetson, or firmware


• Background in defense, robotics, or hardware-centric environments


• Knowledge of anti-tamper techniques or reverse-engineering tools


• Experience with infrastructure-as-code (Terraform, CloudFormation)


• Familiarity with FPGAs or embedded toolchains


• Security certifications (CISSP, CISM, Security+)

Core Responsibilities

• Own and execute security reviews, risk assessments, and vulnerability scans across applications, infrastructure, and embedded systems


• Develop, implement, and maintain information security policies, standards, and controls


• Monitor systems and investigate security events; lead incident response, remediation, and post-incident reviews


• Coordinate compliance activities and audits aligned with frameworks such as NIST, ISO 27001, FedRAMP, or similar


• Partner with engineering teams to harden systems and embed security into development and deployment workflows


• Automate security checks, scans, and guardrails using Python and Bash


• Provide clear status reporting, risk summaries, and incident documentation to stakeholders

Interested candidates may submit their resumes online or call at for further information regarding the position

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

If you would like to complete our voluntary self-identification form, please or copy and paste the following link into an open window in your browser: ;/p>

Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Company Profile:

Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.

Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.

Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting .

Benefits Information:

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.

Beacon Hill. Employing the Future