We are hiring multiple experienced Embedded Security Engineers to lead the development, integration, and verification of comprehensive security capabilities across advanced embedded systems.
Key Responsibilities
1. Security Design & Development
- Architect and develop security mechanisms across embedded platforms, including secure boot chains, trusted execution environments (TEE), encrypted storage, secure firmware updates, and protected communication channels.
- Support the definition and evolution of system-level security architecture for embedded and connected solutions.
2. Risk Assessment & Threat Analysis
- Conduct security assessments, including threat modeling and architecture evaluations, for systems such as infotainment, ADAS, IoT devices, and other connected platforms.
- Analyze potential vulnerabilities, propose mitigation strategies, and proactively enhance system security from early development stages.
3. System Hardening & Secure Development
- Apply security hardening techniques to Linux, Android, and QNX-based systems.
- Perform code-level security reviews and collaborate closely with engineering teams to remediate identified issues.
- Integrate and configure security frameworks such as SELinux or AppArmor to strengthen system protection.
4. Security Testing & Verification
- Execute various security validation activities, including static/dynamic analysis, fuzz testing, and penetration testing.
- Validate implemented security features on target hardware and near-production environments.
5. Security Process & Compliance
- Define, document, and maintain security requirements and engineering workflows.
- Ensure alignment with industry security standards and best practices throughout the development lifecycle.
Requirements
Must-Have Qualifications
- Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or a related discipline.
- 7–15 years of professional experience, including at least 2–5 years working in embedded software, system-level development, or security engineering (experience in Automotive, IoT, or Mobile domains is a plus).
- Hands-on experience with Linux and/or Android systems, particularly in low-level components such as BSP, middleware, or system services.
- Strong foundation in cybersecurity concepts, including encryption, secure communication, secure coding, and security validation techniques.
- Practical exposure to embedded security features such as secure boot, trusted systems, secure storage, OTA/update mechanisms, and inter-device secure communication.
Preferred Qualifications (Optional)
- Familiarity with modern SoC platforms (e.g., Qualcomm, Renesas R-Car, TI, etc.).
- Experience developing or working with QNX systems.
- Relevant security certifications (e.g., CEH, CISSP, OSCP, GIAC).
- Knowledge or hands-on experience in areas such as:
- Secure boot and chain of trust
- Hardware-backed security (e.g., Arm TrustZone, OP-TEE, HSM)
- Data protection (e.g., disk encryption, dm-verity)
- Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec)
- System hardening and access control (SELinux, AppArmor)
- Code signing and image signing processes
- OS-level security for Linux / Android / QNX
- Network security and firewall configurations
- Security testing techniques (fuzzing, penetration testing, static/dynamic analysis)