Embedded Security Expert

4 hours ago

Tashkent, UzbekistanSenior

Responsibilities

Design, develop, and maintain secure embedded software and firmware in C/C++ for microcontrollers and microprocessors.
Conduct threat modeling, security risk assessments, vulnerability analysis, and security assessments throughout the product development lifecycle.
Identify vulnerabilities in embedded designs, code, and architectures and help mitigate associated risks.
Collaborate with development teams on secure coding practices, code reviews, and improved application security.
Track security trends, exploits, and vulnerabilities and translate them into actionable improvements.
Document security architecture, design decisions, and test results for internal and external stakeholders.

MS preferred or BS degree in Computer Science, or equivalent work experience.
At least 5 years of experience in embedded systems development.
At least 1 year of experience in IoT or embedded security.
Expert proficiency in C/C++.
Deep understanding of FreeRTOS, Zephyr, ThreadX, U-Boot, MCUboot, bare-metal development, and the Embedded Linux booting process.
Experience with JTAG/SWD debugging, logic analyzers, oscilloscopes, and reading board schematics.
Strong knowledge of symmetric and asymmetric cryptography, PKI, key management, and secure element provisioning.
Familiarity with embedded attack vectors, reverse engineering, and SAST/DAST tools.
Strong written and verbal English communication skills and the ability to explain security concepts to technical and non-technical audiences.
Technical leadership experience, distributed-team experience, strong problem-solving skills, and fluent English.
Preferred experience with hardware prototyping, soldering, Zigbee, Wi-Fi, Bluetooth, Z-Wave, Secure Boot, Trusted Execution Environment, Trusted Platform Modules, IDA Pro, Ghidra, Radare2, Binary Ninja, Python, cybersecurity frameworks, web application and service testing, and Unix-like systems administration.

201-500 employees