Resin.io provides a software platform that helps developers build, deploy and manage the code that runs on connected devices. In short, we make IoT work.
Our technology is open, standards-based and proven in production across a wide range of scenarios from drones, 3D printers, point-of-sale devices, tidal turbines, skyscrapers and more. Our investors include DFJ, Aspect Ventures, GE, and Ericsson.
Security is paramount for an IoT platform, touching everything from our cloud services to the operating system running on every single device. We’re hiring a security engineer to help us ensure our code delivery pipeline is secure, the risks are well understood, and build a platform that our customers can trust.
What you will work on
Analyse the system and contribute to threat modeling. Help understand risks and define adequate mitigation
Develop best security practices for our internal processes
Identify and fix security vulnerabilities in the platform with audits, penetration testing and other means
Define a bounty program to incentivise security researchers to find and report problems
Take part in architecture decisions to ensure security invariants are held
Apply the principle of least privilege across the organisation
