Hardware Device Security Engineer

Role overview This role focuses on securing IoT, edge, and in-vehicle hardware devices across their full lifecycle, from boot through firmware, operating system, and cloud communications. The position is suited to an engineer who combines deep embedded systems knowledge with a pragmatic approach to threat modeling and security architecture. The work spans both offensive thinking and defensive engineering, translating device security requirements into concrete, production-ready controls.

Responsibilities - Own security architecture for embedded and IoT devices covering boot, firmware, OS, storage, networking, and device-to-cloud communication paths - Design and implement secure boot, device identity, key storage, certificate handling, firmware integrity checks, and trusted update mechanisms - Harden embedded Linux and firmware environments by reducing attack surface, locking down services, permissions, interfaces, and debug access - Assess and secure low-level hardware interfaces such as UART, JTAG, SWD, USB, SPI, and I2C against tampering or extraction - Build secure over-the-air update flows with signing, version control, rollback protection, and failure-safe recovery behavior - Evaluate field threats including physical access, tampering, cloning, persistence, and unauthorized reconfiguration, and perform threat modeling, vulnerability analysis, and security testing

Requirements - Deep understanding of embedded systems and ability to reason about both builder and attacker perspectives - Hands-on experience with firmware integrity mechanisms, device authentication, and cryptography in resource-limited hardware - Familiarity with hardware and embedded Linux threat modeling, vulnerability analysis, and risk assessment practices

Benefits and work setup - Remote, full-time position on the Security team

Nice to have - Background in data-at-rest and data-in-transit protections, including secrets management, encrypted storage, and TLS for embedded systems