Embedded Security Engineer
Posted Updated
- Applied is looking for a multifaceted Embedded Security Engineer who can evangelize embedded security
- This position requires a broad set of security skills to improve our vehicle platform’s embedded security architecture and will lead implementation across multiple platforms
- Assess and guide security for existing and new products
- Lead efforts in establishing and maintaining secure boot processes for embedded devices, ensuring the integrity and authenticity of firmware and software components during boot-up sequences
- Collaborate with hardware engineers to integrate and manage HSM solutions within embedded systems, ensuring robust encryption, key management, and secure cryptographic operations
- Work closely with cross-functional teams, including software developers, hardware engineers, quality assurance, and product management, to integrate security into the entire product development lifecycle
- Familiarity with industry-standard security frameworks, protocols, and compliance requirements (e.g., FIPS 140-2, Common Criteria)
- Strong understanding of cryptographic principles, protocols, and algorithms
- Expertise in secure boot processes, HSM integration, and BSP maintenance for embedded devices
- Expertise in programming languages commonly used in embedded systems development (e.g., C, C++, Python)
- 5+ years of experience in product or cybersecurity security engineering role
- MS/BS degree in Computer Science, Engineering or equivalent
- Proven experience working with automotive embedded systems, including Electronic Control Units (ECUs), in-vehicle networks (e.g., CAN, LIN, Ethernet), and automotive-specific protocols (e.g., AUTOSAR)
- Familiarity with automotive security standards and guidelines such as ISO/SAE 21434, UNECE WP.29, and the Automotive Cybersecurity Best Practices published by organizations like SAE International and Auto-ISAC
- Knowledge of vehicle diagnostics protocols (e.g., OBD-II, UDS) and Over-The-Air (OTA) update mechanisms used in automotive embedded systems, including security considerations for remote software updates and maintenance
- If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles