Apply now
Master'sElectronics, Embedded Systems & Telecom Applications open

Master’s in IoT Cybersecurity Engineering

Online master's programme of 1,900 hours in IoT cybersecurity engineering, structured in 12 modules covering IoT attack surface and threat modelling, embedded cryptography, hardware security, secure boot and firmware, secure communications, device identity, cloud security, device security assessment, detection and response, regulation and secure development, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Identify the attack surface and model threats in IoT systems.

02

Apply cryptography suited to resource-constrained devices.

03

Implement hardware security and secure boot mechanisms.

04

Protect device communications and identity.

05

Assess device security through controlled testing.

06

Apply European product cybersecurity regulations.

07

Design an IoT product that remains secure throughout its lifecycle.

Profile

Who it's for

  • IoT cybersecurity engineers securing devices from silicon to cloud.
  • Product security analysts assessing connected products.
  • Secure firmware developers implementing secure boot, TLS and OTA.
  • Cybersecurity compliance consultants preparing clients for the Cyber Resilience Act.
  • Device security auditors running penetration tests on IoT products.
  • PSIRT managers handling vulnerabilities and disclosure.
  • Engineering or science graduates aiming to work in consumer electronics.
Standards & tools

What you'll work with

  • ETSI EN 303 645 (cybersecurity for consumer IoT)
  • Regulation (EU) 2024/2847 (Cyber Resilience Act)
  • EN 18031-1 (RED cybersecurity requirements for internet-connected radio equipment)
  • IEC 62443-4-2 (technical security requirements for IACS components)
  • NIST IR 8259A (IoT device cybersecurity capability core baseline)
  • ISO/IEC 27001 (information security management systems)
  • PSA Certified (security certification framework for IoT chips and devices)
  • OWASP ISVS (IoT Security Verification Standard)
  • Wireshark
  • binwalk
  • Ghidra
  • MCUboot
  • OpenSSL
Syllabus

12 modules · 1900 h

  1. 1.1. Components of an IoT ecosystem
  2. 1.2. Attack vectors on device, network and cloud
  3. 1.3. OWASP IoT Top 10 list
  4. 1.4. Historical incidents and botnets such as Mirai
  5. 1.5. Attacker motivations and profiles
  6. 1.6. STRIDE threat modelling applied to IoT
  7. 1.7. Risk analysis in connected products
  8. 1.8. Security requirements by design
  9. 1.9. CWE vulnerability taxonomy
  10. 1.10. Case study: threat model of an IP camera
  1. 2.1. AES symmetric encryption and modes of operation
  2. 2.2. Elliptic curve cryptography
  3. 2.3. Hash functions and MAC codes
  4. 2.4. Random number generation
  5. 2.5. ASCON lightweight cryptography
  6. 2.6. Cryptographic accelerators in microcontrollers
  7. 2.7. Side-channel attacks: principles
  8. 2.8. Secure key management
  9. 2.9. Post-quantum cryptography for IoT
  10. 2.10. Practical: ECDSA signing with mbedTLS on a microcontroller
  1. 3.1. Hardware root of trust
  2. 3.2. Secure elements, TPM and SIM
  3. 3.3. TrustZone trusted execution environments
  4. 3.4. Protection of JTAG and SWD debug ports
  5. 3.5. Physically unclonable functions
  6. 3.6. Protection against physical tampering
  7. 3.7. Fault injection: defensive framework
  8. 3.8. Hardware supply chain security
  9. 3.9. Assessment with PSA Certified
  10. 3.10. Lab: configuring TrustZone-M on a Cortex-M33
  1. 4.1. Secure boot chain
  2. 4.2. MCUboot and verified U-Boot bootloaders
  3. 4.3. Image signing and encryption
  4. 4.4. Rollback protection
  5. 4.5. Secure OTA updates
  6. 4.6. Firmware partitioning and isolation
  7. 4.7. Memory protection with MPU
  8. 4.8. Secure development in C and MISRA
  9. 4.9. Static analysis of embedded code
  10. 4.10. Practical: secure boot with MCUboot
  1. 5.1. TLS 1.3 and DTLS on constrained devices
  2. 5.2. Mutual authentication with certificates
  3. 5.3. Security in MQTT and CoAP
  4. 5.4. OSCORE and EDHOC
  5. 5.5. BLE security and pairing
  6. 5.6. Security in Zigbee, Thread and Matter
  7. 5.7. LoRaWAN security
  8. 5.8. Security in cellular IoT networks
  9. 5.9. Network segmentation for devices
  10. 5.10. Lab: MQTT over TLS with mutual authentication
  1. 6.1. Unique device identity
  2. 6.2. Public key infrastructure for IoT
  3. 6.3. Secure factory provisioning
  4. 6.4. Zero-touch enrolment
  5. 6.5. Credential rotation and revocation
  6. 6.6. Secure fleet management
  7. 6.7. EST and SCEP protocols
  8. 6.8. Credentials in eSIM and iSIM
  9. 6.9. End of life and secure erasure
  10. 6.10. Workshop: private PKI for a sensor fleet
  1. 7.1. Shared responsibility model
  2. 7.2. Access policies on IoT platforms
  3. 7.3. API protection
  4. 7.4. Security of device twins
  5. 7.5. Logging and auditing
  6. 7.6. Detection of anomalous behaviour
  7. 7.7. Security of edge containers
  8. 7.8. Personal data protection
  9. 7.9. Secure service configuration
  10. 7.10. Practical: policy review in AWS IoT Core
  1. 8.1. IoT penetration testing methodology
  2. 8.2. Firmware analysis with binwalk
  3. 8.3. Firmware emulation
  4. 8.4. Network traffic analysis
  5. 8.5. Testing radio interfaces
  6. 8.6. Testing companion mobile apps
  7. 8.7. Review of default configuration
  8. 8.8. Findings report and CVSS severity
  9. 8.9. Responsible vulnerability disclosure
  10. 8.10. Lab: firmware analysis in a controlled environment
  1. 9.1. Fleet security monitoring
  2. 9.2. IoT intrusion detection systems
  3. 9.3. Secure logging on devices
  4. 9.4. Event correlation in SIEM
  5. 9.5. Incident response on devices
  6. 9.6. Forensic analysis of IoT devices
  7. 9.7. Patch management at scale
  8. 9.8. Threat intelligence
  9. 9.9. Mandatory incident notification
  10. 9.10. Case study: responding to a botnet in a fleet
  1. 10.1. ETSI EN 303 645 standard
  2. 10.2. RED cybersecurity requirements
  3. 10.3. Cyber Resilience Act obligations
  4. 10.4. IEC 62443 series in industrial IoT
  5. 10.5. NIST IR 8259 and device profile
  6. 10.6. PSA and SESIP certification
  7. 10.7. EUCC European certification scheme
  8. 10.8. Security labelling programmes
  9. 10.9. Manufacturer responsibility after sale
  10. 10.10. Workshop: gap analysis against EN 303 645
  1. 11.1. Secure development maturity model
  2. 11.2. Traceable security requirements
  3. 11.3. Security-focused design review
  4. 11.4. Software bill of materials (SBOM)
  5. 11.5. Open-source dependency management
  6. 11.6. Integrating security into CI/CD
  7. 11.7. Firmware fuzz testing
  8. 11.8. Vulnerability and CVE management
  9. 11.9. Security support throughout the product's lifetime
  10. 11.10. Practical: DevSecOps pipeline for firmware
  1. 12.1. Definition of the IoT product
  2. 12.2. Threat and risk modelling
  3. 12.3. Proposed security architecture
  4. 12.4. Implementation of controls
  5. 12.5. Security assessment of the prototype
  6. 12.6. Regulatory compliance analysis
  7. 12.7. Vulnerability management plan
  8. 12.8. Conclusions on IoT security
  9. 12.9. Master's Thesis report
  10. 12.10. Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within each intake, so the programme fits around your job.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, binwalk, Ghidra, MCUboot and OpenSSL, in free, academic or evaluation versions. Testing is studied through real procedures: firmware and traffic analysis on lab devices, implementing secure boot and TLS communications, and conformity assessment against ETSI EN 303 645. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: ETSI EN 303 645, Regulation (EU) 2024/2847, EN 18031-1, IEC 62443-4-2, NIST IR 8259A, ISO/IEC 27001, PSA Certified, OWASP ISVS.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ETSI EN 303 645, Regulation (EU) 2024/2847 and EN 18031-1 applied to real cases, not as a theoretical annex.
Industry software:Wireshark, binwalk, Ghidra, MCUboot and OpenSSL, in free, academic or evaluation versions.
Master's Thesis with defence:A secure IoT product, from threat modelling and security architecture to implemented controls, prototype assessment and regulatory compliance, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Product and threats
Define the IoT product and model its threats and risks.
Security architecture
Propose a security architecture covering hardware, firmware, communications and cloud.
Controls implementation
Implement the security controls on a prototype.
Assessment and compliance
Assess the prototype's security and analyse its regulatory compliance.
Master's Thesis
Define the vulnerability management plan and present the project, defended before a panel.
Career opportunities

Where this takes you

IoT Cybersecurity EngineerProduct Security AnalystSecure Firmware DeveloperCybersecurity Compliance ConsultantDevice Security AuditorPSIRT Manager
Admissions & scholarships

Requirements

  • A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • An internet connection and a computer capable of running the programme's software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Wireshark, binwalk, Ghidra, MCUboot and OpenSSL, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software, and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Electronics, Embedded Systems & Telecom
Master's9,970 $

Master’s in Software, DevOps and Operations Engineering

Online master's programme of 1,900 hours in software engineering, DevOps and operations, structured in 12 modules covering software architecture, testing, CI/CD, containers and Kubernetes, infrastructure as…

1900 hOnlineElectronics, Embedded Systems & Telecom
Master's9,970 $

Master’s in Industrial Networks and IIoT Engineering

Online master's programme of 1,900 hours in industrial networks and IIoT engineering, structured in 12 modules covering fieldbuses, industrial Ethernet, industrial wireless and private 5G, IIoT…

1900 hOnlineElectronics, Embedded Systems & Telecom
Master's9,970 $

Master’s in Embedded, Firmware and Real-Time Engineering

Online master's programme of 1,900 hours in embedded systems, firmware and real-time engineering. 12 modules covering microcontroller architecture, embedded C and C++ to MISRA C:2012, drivers…

1900 hOnlineElectronics, Embedded Systems & Telecom
Master’s in IoT Cybersecurity EngineeringEnrol
Related programmes

More in Electronics, Embedded Systems & Telecom

Master’s in Advanced Antennas and Beamforming EngineeringView programme →Master’s in Sensors and Physical Instrumentation EngineeringView programme →Master’s in Power Quality Engineering and Active FiltersView programme →Master’s in Embedded Linux and BSP EngineeringView programme →Master’s in Predictive Maintenance EngineeringView programme →Master’s in Software, DevOps and Operations EngineeringView programme →

All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.