Lead Embedded Security Engineer

Job Description Summary

Key Responsibilities:

• Embedded Development: Design, develop, test, and debug embedded software, ensuring code is robust, efficient, and well-optimized.
• Security Implementation: Execute the Secure Development Life Cycle (SDL) for assigned components, ensuring compliance with IEC-62443-4-2 standards.
• Vulnerability Management: Perform regular code/third-party scans, manage SBOM/HBOM inventories, and remediate identified vulnerabilities.
• System Hardening: Implement security features such as Secure Boot, authentication mechanisms, and system logging.
• Integration & Collaboration: Work closely with hardware and cross-functional teams to integrate software with hardware, participating in code reviews and design discussions.
• Validation: Conduct software verification and validation activities to ensure product quality and meet security certification requirements (e.g., BV, Exida).
• Documentation: Maintain clear documentation, including technical design specs and customer-facing Secure Deployment Guides.

Required qualifications:

• Education: Bachelor’s or master’s degree in computer science, Electronic & Communication Engineering, Electrical Engineering, or a related field.
• Embedded Experience: 5+ years of hands-on experience in embedded software development with exposure to security standards.
• Technical Proficiency:
• Advanced proficiency in Embedded C/C++ for optimized code development.
• Strong hands-on experience with RTOS platforms (e.g., FreeRTOS, VxWorks) managing real-time constraints.
• Strong proficiency in Python for automation and security scripting.
• Security Expertise:
• In-depth knowledge of IEC-62443-4-2 and Secure Development Life Cycle (SDL) practices.
• Experience with secure boot, authentication protocols, and device-level security hardening.
• Familiarity with vulnerability management, SBOM/HBOM generation, and third-party risk assessment.
• Core Competencies:
• Solid understanding of hardware/software integration, memory management, and device drivers.
• Excellent debugging and problem-solving abilities.
• Strong communication skills, with the ability to facilitate effective collaboration with cross-functional teams and stakeholders.

Preferred Skills:

• Familiarity with IEC-61850 standards for communication networks and systems in power utility automation.
• Knowledge of software configuration management tools such as Git or SVN.
• Additional Information
• Relocation Assistance Provided: Yes

Additional Information