drjobs Senior Advanced Firmware Engineer, Cybersecurity

Senior Advanced Firmware Engineer, Cybersecurity

Employer Active

1 Vacancy
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Golden Valley, NV - USA

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description

Description

As a Cybersecurity Senior Advanced Firmware Engineer you will contribute to the development of secure firmware for a wide range of embedded products. Your role will include reviewing product specifications with a cybersecurity mindset and implementing robust secure firmware solutions to meet the needs of Resideos customers. Youll work collaboratively with cross-functional teams to ensure products meet not only functional but also security and compliance requirements. Join us and discover why a career with Resideo in embedded security is the opportunity youve been looking for!

JOB DUTIES:

  • Design and develop secure firmware for existing and new products
  • Integrate cryptographic libraries and implement secure boot firmware signing and key management mechanisms
  • Facilitate secure builds using source control tools with security in mind (e.g. signed commits SBOM tracking)
  • Plan and estimate development tasks including potential security impact assessments
  • Support all phases of the secure software lifecycle: design implementation integration testing and release
  • Participate in security-focused peer code reviews and maintain secure coding practices
  • Collaborate with hardware systems and software teams to define and enforce firmware security requirements
  • Assist in failure analysis with a focus on identifying security vulnerabilities and attack vectors
  • Help maintain firmware and internal tools including those for vulnerability scanning security testing and automation
  • Contribute to documentation of secure design principles and product threat models
  • Prototype security-focused proof-of-concepts and participate in internal security research initiatives

YOU MUST HAVE:

  • 5 years experience programming in C and/or C with exposure to Python or scripting languages
  • An understanding of basic cryptography (e.g. encryption hashing certificates)
  • Proven professional experience with and knowledge of secure coding principles and embedded systems basics

WE VALUE:

  • Strong interpersonal verbal and written communication skills
  • Familiarity with Secure Boot TPM TrustZone or HSMs
  • Knowledge of common embedded vulnerabilities (e.g. stack overflows buffer management issues)
  • Interest in or experience with firmware signing OTA update security and anti-rollback mechanisms
  • Understanding of embedded security standards (e.g. NIST 800-193 ISO 21434 or IEC 62443)
  • Passion for cybersecurity and eagerness to learn secure firmware development
  • Understanding of protocols like RS-232 I2C SPI UART and their potential attack surfaces
  • Knowledge of embedded real-time operating systems (RTOS) and secure thread handling

WHATS IN IT FOR YOU:

  • Innovation: Bring your creative ideas to the table and be part of a company that values out-of-the-box thinking
  • Growth: Join a dynamic team with ample opportunities for professional and personal development
  • Resideo provides employees with a comprehensive benefits package including life and health insurance life assistance program accidental death and dismemberment insurance disability insurance retirement plans vacation & holidays

#LI-JR2

#LI-HYBRID




Required Experience:

Senior IC

Employment Type

Full-Time

Company Industry

Department / Functional Area

Engineering

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.