DescriptionAs a Cybersecurity Senior Advanced Firmware Engineer you will contribute to the development of secure firmware for a wide range of embedded products. Your role will include reviewing product specifications with a cybersecurity mindset and implementing robust secure firmware solutions to meet the needs of Resideos customers. Youll work collaboratively with cross-functional teams to ensure products meet not only functional but also security and compliance requirements. Join us and discover why a career with Resideo in embedded security is the opportunity youve been looking for!
JOB DUTIES:
- Design and develop secure firmware for existing and new products
- Integrate cryptographic libraries and implement secure boot firmware signing and key management mechanisms
- Facilitate secure builds using source control tools with security in mind (e.g. signed commits SBOM tracking)
- Plan and estimate development tasks including potential security impact assessments
- Support all phases of the secure software lifecycle: design implementation integration testing and release
- Participate in security-focused peer code reviews and maintain secure coding practices
- Collaborate with hardware systems and software teams to define and enforce firmware security requirements
- Assist in failure analysis with a focus on identifying security vulnerabilities and attack vectors
- Help maintain firmware and internal tools including those for vulnerability scanning security testing and automation
- Contribute to documentation of secure design principles and product threat models
- Prototype security-focused proof-of-concepts and participate in internal security research initiatives
YOU MUST HAVE:
- 5 years experience programming in C and/or C with exposure to Python or scripting languages
- An understanding of basic cryptography (e.g. encryption hashing certificates)
- Proven professional experience with and knowledge of secure coding principles and embedded systems basics
WE VALUE:
- Strong interpersonal verbal and written communication skills
- Familiarity with Secure Boot TPM TrustZone or HSMs
- Knowledge of common embedded vulnerabilities (e.g. stack overflows buffer management issues)
- Interest in or experience with firmware signing OTA update security and anti-rollback mechanisms
- Understanding of embedded security standards (e.g. NIST 800-193 ISO 21434 or IEC 62443)
- Passion for cybersecurity and eagerness to learn secure firmware development
- Understanding of protocols like RS-232 I2C SPI UART and their potential attack surfaces
- Knowledge of embedded real-time operating systems (RTOS) and secure thread handling
WHATS IN IT FOR YOU:
- Innovation: Bring your creative ideas to the table and be part of a company that values out-of-the-box thinking
- Growth: Join a dynamic team with ample opportunities for professional and personal development
- Resideo provides employees with a comprehensive benefits package including life and health insurance life assistance program accidental death and dismemberment insurance disability insurance retirement plans vacation & holidays
#LI-JR2
#LI-HYBRID
Required Experience:
Senior IC