Tasks:
- * Analyze low-level firmware and boot flows
- * Apply and validate system hardening measures and secure defaults
- * Build and customize Yocto-based platforms
- * Develop security validation tools and scripts
- * Evaluate security mechanisms across BIOS, BMC, and device firmware
- * Harden embedded Linux and BMC management environments
- * Identify attack surfaces and configuration gaps
- * Implement and validate firmware security controls
- * Integrate secure boot, firmware verification, update, rollback protection, and debug controls
- * Integrate security checks into CI workflows
- * Isolate services and enforce access controls
- * Perform threat modeling and attack path analysis
Perks/Benefits:
- + Hybrid working
- + Recruitment accommodations
- + Relocation package
- + Visa sponsorship
Skills/Tech stack required:
[Access Control] [AppArmor] [ARM architecture] [Automation Scripting] [BIOS] [BMC] [Bootloaders] [C/C++] [CI/CD] [DICE] [ECryptfs] [Embedded Linux] [Firmware fuzzing] [Firmware security] [Firmware Update] [Firmware update mechanisms] [Firmware verification] [Linux Capabilities] [Linux Security] [Linux system] [Linux system hardening] [OpenBMC] [OpenEmbedded] [PCIe] [Privilege Management] [Rollback Protection] [Secure boot] [SELinux] [Service Isolation] [System Hardening] [Threat modeling] [TPM] [UEFI] [Update Mechanisms] [Yocto]
Educational requirements:
N/A
Role(s):
[Architect] [Embedded Systems Security Engineer] [Engineer] [Firmware Security Architect] [Platform] [Platform Security Architect] [Security Architect] [Security Engineer] [Systems Security Engineer]