9 days ago
Base Salary
$180k - $285k/yr
Responsibilities
- Lead threat modeling, architecture reviews, and design-level risk assessments for application and embedded systems.
- Conduct secure code reviews for critical modules in Python and C/C++.
- Evaluate cryptographic usage, authentication/authorization flows, and protocol security.
- Identify and prioritize vulnerabilities in software and firmware, partnering with developers on remediation.
- Participate in security assessments of embedded devices.
- Provide security input on secure boot, firmware update integrity, and device identity mechanisms.
- Collaborate with software, firmware, hardware, and systems teams to implement secure solutions.
Requirements
- 5+ years of experience in software engineering with a focus on security.
- Strong investigative and analytical problem-solving skills.
- Experience with secure architecture design and threat modeling for complex systems.
- Expertise in both high-level (e.g., Python) and low-level (e.g., C, C++) programming languages.
- Familiarity with security best practices for web applications and embedded security concepts.
- Proven ability to audit code for security flaws across different technology stacks.
- Strong knowledge of security best practices, applied cryptography, and security frameworks.
- Excellent communication skills to discuss security with both software and hardware engineers.
- Ability to work collaboratively in a multi-disciplinary team environment.
Benefits
- Compensation package includes equity and robust benefits.
- High-quality company-subsidized healthcare.
- Disability and life insurance.
- 401(k) retirement planning.
- Flexible PTO.
- Free on-site catered meals.