Embedded Systems Security Engineer, Embedded Linux & Hardware Security
Overview
Own the security strategy for a next generation embedded Linux platform at scale. Build hardware root of trust, secure boot, and trusted execution environments across devices. Collaborate with manufacturing to provision devices securely while automating security pipelines in CI/CD. Join a team that blends low level hardware security with software containment and DevSecOps to drive secure product delivery. Primary tech: ARM TrustZone, OP-TEE, dm-verity
What You'll Do10
- 1Build the Hardware Root of Trust and Secure Boot architecture from bootloader to Linux kernel to harden devices
- 2Implement dm-verity and encryption at rest for authenticated, tamper-evident storage
- 3Develop and maintain a TEE and Secure/Trusted Applications for device security
- 4Enforce sandboxing with SELinux, AppArmor, cgroups, namespaces, and seccomp filters
- 5Create automated cryptographic signing pipelines in CI/CD using GitLab CI or GitHub Actions
- 6Collaborate with manufacturing to securely burn fuses and validate security features at end-of-line
- 7Design multi-slot boot recovery layouts (A/B) to ensure fail-safe OTA updates
- 8Prototype and integrate security features in the Linux kernel storage subsystem (dm-crypt, dm-verity)
- 9Lead production provisioning tooling and scripts for secure device initialization
- 10Drive security posture improvements through threat modeling and validation
Requirements10
- 1Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related field
- 26+ years in Embedded Linux development, board bring-up, and BSP customization
- 33+ years deploying device-level security features in production hardware
- 4Expert knowledge of bootloaders (e.g., U-Boot Verified Boot, Barebox) and Linux kernel storage/security subsystems (dm-crypt, dm-verity)
- 5Deep understanding of ARM TrustZone (ARMv7-A/v8-A, EL1–EL3)
- 6Proven experience implementing containment tools (SELinux/AppArmor, cgroups, namespaces)
- 7Experience with Yocto Project or Buildroot for embedded Linux builds
- 8Proficiency in C and scripting (Python or Bash)
- 9Strong cryptography foundation; familiarity with HSMs and PKI
- 10Experience with secure OTA and anti-rollback concepts
Salary Insight
Salary not disclosed in listing
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Beacon Hill
VerifiedEmbedded Software Engineer, C/C++ & Linux
Own the full lifecycle of embedded software for a regulated networking product. You will write C/C++ code, debug at the hardware level with GDB, JTAG, and logic analyzers, and ship secure Linux-based features. You join a small team reporting to an engineering manager, with direct exposure to hardware and security reviews. This contract role in Plano stands out for its mix of low-level debugging and high-stakes regulatory compliance.
Motion Recruitment Partners, LLC
VerifiedSenior Embedded Engineer Motion Recruitment Partners LLC San Francisco CA
Lead ownership of embedded software solutions for connected hardware products at a fast‑paced environment. Drive development of high‑performance embedded Linux systems firmware platforms and secure IoT connectivity. Scale impact across product line and collaborate with cross‑functional teams.
Neurophos
VerifiedPrincipal Platform Security Architect, Silicon Root of Trust
You will own platform security for the T100 system and its electronic integrated circuit (EIC), from fab through field deployment. This is a product security role, not IT: your work makes the silicon verifiable to hyperscale customers. You will architect the silicon root of trust, secure boot, device attestation, and security telemetry. You will own the outsourced root-of-trust subsystem engagement and drive compliance with OCP and DMTF specs. You will define the security narrative in customer reviews. This role shapes the security foundation of a photonics-based AI compute platform backed by Gates Frontier and M12.
Motion Recruitment Partners, LLC
VerifiedSenior Application Engineer Software OEM Customer-facing
Design and ship high-performance embedded solutions that power OEM products. Own software and firmware integration from concept to production. Lead cross-functional initiatives that improve system reliability and performance. Drive technical excellence across distributed teams.
REC_RTX_Ext_Gateway
VerifiedPrincipal Program Protection Engineer Embedded Software Engineer
Lead software assurance efforts to develop and deploy critical capabilities for warfighters using Agile methods. Drive system integrity through design and development of hardened applications. Collaborate with cross-functional teams to ensure hardware meets software requirements. Shape future of aerospace and defense.
StaffRight Associates, LLC
VerifiedSenior Staff Electrical Engineer, Embedded Systems
You own the architecture and delivery of next-generation hardware systems that power advanced sensing technologies. Reporting to the VP of Engineering, you lead a team of 8 engineers across embedded firmware and board design, translating complex requirements into high-performance physical reality. This role stands apart: you drive technical strategy and hands-on design from concept to production, with direct influence on reliability and sophistication.