Mô tả công việc

1. Security Architecture & Engineering
● Design and implement end-to-end security features for embedded platforms, including: Secure Boot, Trusted Execution Environments (TEE), Secure storage, Secure update mechanisms, Secure communication, etc...
● Contribute to security architecture definition for embedded and connected systems.
2. Threat Modeling & Reviews
● Perform security architecture reviews and threat modeling for infotainment, ADAS, IoT, or connected device platforms.
● Identify risks, define mitigation strategies, and drive security improvements early in the development lifecycle.
3. Security Implementation & Hardening
● Implement security hardening for Linux / Android / QNX systems.
● Conduct secure code reviews and collaborate with development teams to address vulnerabilities.
● Support integration of access control and system hardening mechanisms (e.g. SELinux, AppArmor).
4. Testing & Validation
● Perform security testing and validation, including: Static and dynamic analysis, Fuzzing, Penetration testing
● Validate security features on real hardware and production-like environments.
5. Process & Compliance
● Develop and maintain security requirements and security engineering processes (SEP).
● Support compliance with relevant security standards and best practices.
 

Yêu cầu công việc

● Educational background: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cryptography, or a related technical field
● 7-15 years of overall experience, with at least 2-5 years of experience in embedded software development, system software, or security engineering (backgrounds from Automotive, IoT, Mobile Devices, Consumer Electronics are all welcome)
● Practical experience with Linux and/or Android platforms, particularly in BSP, middleware, system services, or other low-level system components.
● Solid understanding of cybersecurity fundamentals, including cryptography, secure communication protocols, secure coding practices, and security testing principles.
● Hands-on experience implementing or supporting embedded system security features, such as secure boot, system trust mechanisms, secure storage, secure update/OTA, and secure communication between components or devices.

Nice-to-Have (Any of the following will be a strong advantage, but are not mandatory)
● Good knowledge or hands-on experience in development with modern SoC architectures, such as: Qualcomm, Renesas (RCAR), TI, etc.
● Experience in QNX development
● Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.)
● Good knowledge or hands-on experience in following areas:
○ Secure Boot.
○ Hardware-back security such as Trustzone (Arm TrustZone, OP-TEE, etc.), HSM, etc.
○ Storage security (disk encryption, dm-verity, etc.).
○ Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec, etc.).
○ Access control & hardening (SELinux, AppArmor, etc.).
○ Signing tools (Android signing, secure boot signing, etc.).
○ Linux / Android / QNX security development/hardening.
○ Network security, firewall.
○ Security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.)