Security Engineer – Secure Boot

Our client is seeking an experienced Security Engineer with specialized expertise in Secure Boot to join an exciting and fast scaling semiconductor designer. In this role, you will play a critical role in ensuring the integrity and trustworthiness of the boot process in embedded systems, microcontrollers, and System on Chips (SoCs). You will collaborate with cross-functional teams to design, implement, and validate secure boot architectures to protect against unauthorized access, tampering, and malware attacks in hardware products.

Responsibilities

• Develop, implement, and maintain secure boot architectures for embedded systems and SoC products, ensuring protection from unauthorized modifications.
• Define secure boot policies, chain of trust mechanisms, and cryptographic processes that align with industry standards and best practices.
• Collaborate with firmware, hardware, and software teams to ensure secure integration of secure boot solutions.
• Design key storage and key provisioning processes that are resilient to physical and software-based attacks.
• Perform threat modeling, attack surface analysis, and risk assessments on boot-related components.
• Identify and mitigate potential security vulnerabilities and weaknesses, focusing on embedded systems and semiconductor security.
• Develop and execute validation tests for secure boot implementations, including penetration testing, fuzzing, and fault injection techniques.
• Work closely with internal stakeholders (hardware designers, software engineers, and product managers) to embed security into all aspects of product development.

Qualifications

• Bachelor’s or master’s degree in electrical engineering, Computer Engineering, Computer Science, or a related field.
• Relevant certifications (e.g., CISSP, CISM, CEH) are a plus.
• Minimum 5 years of experience in security engineering with a focus on embedded systems, secure boot, and hardware security.
• Deep understanding of the secure boot process, secure firmware updates, and cryptographic techniques used in securing embedded devices.
• Experience in developing or evaluating hardware security mechanisms for microcontrollers, SoCs, or other semiconductor devices.
• Experience with hardware security modules (HSM), trusted platform modules (TPM), or similar secure key storage technologies.
• Strong knowledge of embedded systems architecture, including ARM TrustZone, RISC-V, or similar architectures.