ESCO occupation

embedded systems security engineer

EN RO

Embedded systems security engineers advise and implement solutions to control access to data and programs in embedded and connected systems. They help ensuring the safe operation of products with embedded systems and connected devices by being responsible for the protection and security of the related systems and design, plan and execute security measures accordingly. Embedded systems security engineers help to keep attackers at bay by implementing safeguards that prevent intrusions and breaches.

2529.3 ISCO 2529 ESCO source

Competences

Groups

Essential

Optional

Competences and skills

41 ESCO relations

Essential knowledge 11 competences

Occupation specific

0 competences

No competences in this bucket.

Sector-specific

7 competences

cyber attack counter-measures

Methods, technologies and techniques used to defend (detect, monitor and recover) against cyber attacks. These cyber attacks include several attack vectors such as malware, denial of service (DoS) attacks and phishing. Intrusion prevention systems (IPS), firewall, antivirus, intrusion detection systems (IDS), cybersecurity training, backup, Information Security Management System (ISM), multi-factor authentication and employ awareness, are some examples of the methods used.

digital

ESCO source

embedded systems

The computer systems and components with a specialised and autonomous function within a larger system or machine such as embedded systems software architectures, embedded peripherals, design principles and development tools.

digital

ESCO source

ICT network security risks

The security risk factors, such as hardware and software components, devices, interfaces and policies in ICT networks, risk assessment techniques that can be applied to assess the severity and the consequences of security threats and contingency plans for each security risk factor.

digital

ESCO source

ICT security standards

Best practices and guidelines established for securing information and communication technology (ICT) systems and data. Standards as is the case of ISO 27000 series, provide a framework for implementing effective security controls, including access control, risk assessment and incident management, as well as to provide compliance of anorganisation.

digital

ESCO source

information security strategy

The plan defined by a company which sets the information security objectives and measures to mitigate risks, define control objectives, establish metrics and benchmarks while complying with legal, internal and contractual requirements.

digital

ESCO source

Internet of Things

The general principles, categories, requirements, limitations and vulnerabilities of smart connected devices (most of them with intended internet connectivity).

digital

ESCO source

software anomalies

The deviations of what is standard and exceptional events during software system performance, identification of incidents that can alter the flow and the process of system execution.

digital

ESCO source

Cross-sector

4 competences

computer programming

The techniques and principles of software development, such as analysis, algorithms, coding, testing and compiling of programming paradigms (e.g. object oriented programming, functional programming) and of programming languages.

digCompdigital

ESCO source

digital systems

Systems to store, process and spread information in digital form. They are hardware, software and networks, as well as the ways in which these can be employed.

digital

ESCO source

safety engineering

The study of the risks associated with engineered designs and systems, accident prevention as well as the safety benefits of reducing deaths and injuries. The discipline focuses on analysing and mitigating potential hazards in engineering processes.

green

ESCO source

security engineering

Interdisciplinary field of study that focuses on the realisation of secure systems and the technology to protect individuals or information from malice, errors, or unauthorized access. It involves defining security protection requirements, processes, and methods to ensure the resilience of systems and data.

ESCO source

Essential skills and competences 20 competences

Occupation specific

1 competence

develop ICT device driver

Create a software program that controls the working of an ICT device and its interaction with other applications.

digital

ESCO source

Sector-specific

15 competences

analyse ICT system

Analyse the functioning and performance of information systems in order to define their goals, architecture and services and set procedures and operations to meet end users requirements.

digital

ESCO source

define security policies

Design and execute a written set of rules and policies that have the aim of securing an organisation concerning constraints on behaviour between stakeholders, protective mechanical constraints and data-access constraints.

ESCO source

develop software prototype

Create a first incomplete or preliminary version of a piece of software application to simulate some specific aspects of the final product.

digital

ESCO source

execute software tests

Perform tests to ensure that a software product will perform flawlessly under the specified customer requirements and identify software defects (bugs) and malfunctions, using specialised software tools and testing techniques.

digital

ESCO source

identify ICT security risks

Apply methods and techniques to identify potential security threats, security breaches and risk factors using ICT tools for surveying ICT systems, analysing risks, vulnerabilities and threats and evaluating contingency plans.

digital

ESCO source

identify ICT system weaknesses

Analyse the system and network architecture, hardware and software components and data in order to identify weaknesses and vulnerability to intrusions or attacks. Execute diagnostic operations on cyber infrastructure including research, identification, interpretation and categorization of vulnerabilities, associated attacks and malicious code (e.g. malware forensics and malicious network activity). Compare indicators or observables with requirements and review logs to identify evidence of past intrusions.

digital

ESCO source

interpret technical texts

Read and understand technical texts that provide information on how to perform a task, usually explained in steps.

ESCO source

keep up with the latest information systems solutions

Gather the latest information on existing information systems solutions which integrate software and hardware, as well as network components.

digital

ESCO source

manage IT security compliances

Guide application and fulfilment of relevant industry standards, best practices and legal requirements for information security.

digital

ESCO source

monitor system performance

Measure system reliability and performance before, during and after component integration and during system operation and maintenance. Select and use performance monitoring tools and techniques, such as special software.

digital

ESCO source

perform ICT security testing

Execute types of security testing, such as network penetration testing, wireless testing, code reviews, wireless and/or firewall assessments in accordance with industry-accepted methods and protocols to identify and analyse potential vulnerabilities.

digital

ESCO source

provide ICT consulting advice

Advise on appropriate solutions in the field of ICT by selecting alternatives and optimising decisions while taking into account potential risks, benefits and overall impact to professional customers.

ESCO source

use software design patterns

Utilise reusable solutions, formalised best practices, to solve common ICT development tasks in software development and design.

digital

ESCO source

use software libraries

Utilise collections of codes and software packages which capture frequently used routines to help programmers simplify their work.

digital

ESCO source

utilise computer-aided software engineering tools

Use software tools (CASE) to support the development lifecycle, design and implementation of software and applications of high-quality that can be easily maintained.

digital

ESCO source

Cross-sector

4 competences

create flowchart diagram

Compose a diagram that illustrates systematic progress through a procedure or system using connecting lines and a set of symbols.

ESCO source

define technical requirements

Specify technical properties of goods, materials, methods, processes, services, systems, software and functionalities by identifying and responding to the particular needs that are to be satisfied according to customer requirements.

ESCO source

perform risk analysis

Identify and assess factors that may jeopardise the success of a project or threaten the organisation's functioning. Implement procedures to avoid or minimise their impact.

ESCO source

report test findings

Report test results with a focus on findings and recommendations, differentiating results by levels of severity. Include relevant information from the test plan and outline the test methodologies, using metrics, tables, and visual methods to clarify where needed.

ESCO source

Optional competences 1 competence

Occupation specific

0 competences

No competences in this bucket.

Sector-specific

0 competences

No competences in this bucket.

Cross-sector

0 competences

No competences in this bucket.

Optional knowledge 4 competences

Occupation specific

0 competences

No competences in this bucket.

Sector-specific

4 competences

cloud technologies

The technologies which enable access to hardware, software, data and services through remote servers and software networks irrespective of their location and architecture.

digital

ESCO source

ethical hacking principles

The set of actions that are carried out to detect vulnerabilities within a computerised system in order to improve security within an organisation. They aim to identify and address data breaches and threats in a network.

digital

ESCO source

ICT encryption

The conversion of electronic data into a format which is readable only by authorized parties which use key encryption techniques, such as Public Key Infrastructure (PKI) and Secure Socket Layer (SSL).

digital

ESCO source

organisational resilience

The strategies, methods and techniques that increase the organisation's capacity to protect and sustain the services and operations that fulfil the organisational mission and create lasting values by effectively addressing the combined issues of security, preparedness, risk and disaster recovery.

ESCO source

Cross-sector

0 competences

No competences in this bucket.

Optional skills and competences 5 competences

Occupation specific

0 competences

No competences in this bucket.

Sector-specific

3 competences

debug software

Repair computer code by analysing testing results, locating the defects causing the software to output an incorrect or unexpected result and remove these faults.

digital

ESCO source

design user interface

Create software or device components which enable interaction between humans and systems or machines, using appropriate techniques, languages and tools so as to streamline interaction while using the system or machine.

digital

ESCO source

integrate system components

Select and use integration techniques and tools to plan and implement integration of hardware and software modules and components in a system.

digital

ESCO source

Cross-sector

2 competences

develop creative ideas

Developing new artistic concepts and creative ideas.

ESCO source

perform project management

Manage and plan various resources, such as human resources, budget, deadline, results, and quality necessary for a specific project, and monitor the project's progress in order to achieve a specific goal within a set time and budget.

research

ESCO source