Firmware Security Certification Engineer
Vancouver, WA - USA
Job Summary
Description -
We are seeking a full-time Firmware Security Certification Engineer in Vancouver to provide hands-on technical expertise for the execution of Common Criteria certification activities for Dune-based devices. This role will work across firmware engineering security networking test and certification teams to translate certification requirements into implementable technical controls reproducible evidence and successful lab evaluations. The ideal candidate combines deep knowledge of Dune firmware with strong networking automation scripting troubleshooting and technical communication skills.
Key Responsibilities
- Serve as a technical subject-matter expert for Common Criteria certification of Dune-based devices.
- Analyze Security Target Protection Profile Security Functional Requirement and assurance evidence needs and map them to Dune firmware architecture and device behavior.
- Partner with firmware and security architects to identify gaps define remediation plans and validate implementation readiness.
- Configure build deploy and troubleshoot Dune firmware in certification test environments.
- Develop and maintain automated tests scripts utilities and repeatable workflows that produce objective certification evidence.
- Execute functional security negative regression and interoperability testing including network protocol and secure communications testing.
- Investigate test failures across firmware networking services authentication cryptography and device configuration.
- Prepare clear technical artifacts test procedures results defect reports and responses to evaluator questions.
- Work directly with internal engineering teams and external evaluation laboratories to resolve technical issues and maintain certification schedules.
- Improve certification efficiency through reusable automation documented methods and earlier validation within the development lifecycle.
Required Qualifications
- Bachelors degree in Computer Science Computer Engineering Electrical Engineering Cybersecurity or a related technical field or equivalent practical experience.
- Demonstrated experience developing integrating debugging or validating Dune firmware or a closely related embedded device platform.
- Strong understanding of embedded firmware architecture operating-system services device configuration logging and diagnostic methods.
- Practical networking expertise including TCP/IP IPv4/IPv6 DNS DHCP HTTP/HTTPS TLS SNMP 802.1X certificates and network troubleshooting.
- Experience creating automated tests and scripts using Python shell scripting PowerShell or comparable languages.
- Ability to analyze complex technical requirements isolate defects reproduce issues and drive them to closure across multiple teams.
- Experience with source control defect tracking build environments test frameworks and continuous integration workflows.
- Strong written and verbal communication skills including the ability to produce precise technical evidence and explain issues to engineers evaluators and program stakeholders.
- Ability to work on site or in a hybrid arrangement in Vancouver as required by the will be offerred.
Preferred Qualifications
- Direct experience supporting a Common Criteria evaluation including Security Target development evaluation evidence evaluator interactions vulnerability analysis or certification maintenance.
- Knowledge of Common Criteria concepts Protection Profiles assurance activities and certification-lab workflows.
- Experience with enterprise printers multifunction devices embedded Linux secure boot cryptographic services authentication access control audit logging or secure update mechanisms.
- Familiarity with packet capture and network diagnostic tools security testing tools and API or protocol test automation.
- Experience developing test harnesses managing test data and integrating automated security tests into continuous integration pipelines.
- Understanding of secure development lifecycle practices threat modeling vulnerability remediation and security certification dependencies.
The pay range for this role is $105050 to $161800 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location job-related knowledge skills and experience.
Benefits:
HP offers a comprehensive benefits package for this position including:
- Health insurance
- Dental insurance
- Vision insurance
- Long term/short term disability insurance
- Employee assistance program
- Flexible spending account
- Life insurance
- Generous time off policies including;
- 4-12 weeks fully paid parental leave based on tenure
- 11 paid holidays
- Additional flexible paid vacation and sick leave (US benefits overview)
The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time with or without notice subject to applicable law.
Job -
SoftwareSchedule -
Full timeShift -
No shift premium (United States of America)Travel -
Relocation -
Equal Opportunity Employer (EEO) -
HP Inc. provides equal employment opportunity to all employees and prospective employees without regard to race color religion sex national origin ancestry citizenship sexual orientation age disability or status as a protected veteran marital status familial status physical or mental disability medical condition pregnancy genetic predisposition or carrier status uniformed service status political affiliation or any other characteristic protected by applicable national federal state and local law(s).
Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.
For more information review HPsEEO Policy or read about your rights as an applicant under the law here: Know Your Rights: Workplace Discrimination is Illegal
Required Experience:
IC