Lead Embedded Security Engineer

Job Description Summary

Job Description

Key Responsibilities:

• Embedded Development: Design, develop, test, and debug embedded software, ensuring code is robust, efficient, and well-optimized.

• Security Implementation: Execute the Secure Development Life Cycle (SDL) for assigned components, ensuring compliance with IEC-62443-4-2 standards.

• Vulnerability Management: Perform regular code/third-party scans, manage SBOM/HBOM inventories, and remediate identified vulnerabilities.

• System Hardening: Implement security features such as Secure Boot, authentication mechanisms, and system logging.

• Integration & Collaboration: Work closely with hardware and cross-functional teams to integrate software with hardware, participating in code reviews and design discussions.

• Validation: Conduct software verification and validation activities to ensure product quality and meet security certification requirements (e.g., BV, Exida).

• Documentation: Maintain clear documentation, including technical design specs and customer-facing Secure Deployment Guides.

Required qualifications:

• Education: Bachelor’s or master’s degree in computer science, Electronic & Communication Engineering, Electrical Engineering, or a related field.

• Embedded Experience: 5+ years of hands-on experience in embedded software development with exposure to security standards.

• Technical Proficiency:

  • Advanced proficiency in Embedded C/C++ for optimized code development.

  • Strong hands-on experience with RTOS platforms (e.g., FreeRTOS, VxWorks) managing real-time constraints.

  • Strong proficiency in Python for automation and security scripting.

• Security Expertise:

  • In-depth knowledge of IEC-62443-4-2 and Secure Development Life Cycle (SDL) practices.

  • Experience with secure boot, authentication protocols, and device-level security hardening.

  • Familiarity with vulnerability management, SBOM/HBOM generation, and third-party risk assessment.

• Core Competencies:

  • Solid understanding of hardware/software integration, memory management, and device drivers.

  • Excellent debugging and problem-solving abilities.

  • Strong communication skills, with the ability to facilitate effective collaboration with cross-functional teams and stakeholders.

Preferred Skills:

• Familiarity with IEC-61850 standards for communication networks and systems in power utility automation.

• Knowledge of software configuration management tools such as Git or SVN.

Additional Information