Lead Embedded Security Engineer

Job description

Job Description

Summary

Summary We are seeking an experienced Embedded Security Engineer to join our team. In this role, you will bridge the gap between low-level embedded software development and robust cybersecurity. You will be responsible for ensuring that our eLumina devices are secure by design, compliant with international standards, and resilient against evolving threats.

Key Responsibilities: Embedded Development: Design, develop, test, and debug embedded software, ensuring code is robust, efficient, and well-optimized.

Security Implementation

Execute the Secure Development Life Cycle (SDL) for assigned components, ensuring compliance with IEC-62443-4-2 standards.

Vulnerability Management

Perform regular code/third-party scans, manage SBOM/HBOM inventories, and remediate identified vulnerabilities.

System Hardening

Implement security features such as Secure Boot, authentication mechanisms, and system logging.

Integration & Collaboration

Work closely with hardware and cross-functional teams to integrate software with hardware, participating in code reviews and design discussions.

Validation

Conduct software verification and validation activities to ensure product quality and meet security certification requirements (e.g., BV, Exida).

Documentation

Maintain clear documentation, including technical design specs and customer-facing Secure Deployment Guides.

Required qualifications

Education: Bachelor’s or master’s degree in computer science, Electronic & Communication Engineering, Electrical Engineering, or a related field.

Embedded Experience

5+ years of hands-on experience in embedded software development with exposure to security standards.

Technical Proficiency

Advanced proficiency in Embedded C/C++ for optimized code development. Strong hands-on experience with RTOS platforms (e.g., FreeRTOS, VxWorks) managing real-time constraints. Strong proficiency in Python for automation and security scripting.

Security Expertise

In-depth knowledge of IEC-62443-4-2 and Secure Development Life Cycle (SDL) practices. Experience with secure boot, authentication protocols, and device-level security hardening. Familiarity with vulnerability management, SBOM/HBOM generation, and third-party risk assessment.

Core Competencies

Solid understanding of hardware/software integration, memory management, and device drivers. Excellent debugging and problem-solving abilities. Strong communication skills, with the ability to facilitate effective collaboration with cross-functional teams and stakeholders.

Preferred Skills

Familiarity with IEC-61850 standards for communication networks and systems in power utility automation. Knowledge of software configuration management tools such as Git or SVN.

Additional Information Relocation Assistance Provided

Yes