Embedded Security Engineer

Summary

Join NGRAVE, a leader in secure digital asset solutions, as an Embedded Security Engineer. You will play a key role in ensuring the security and robustness of our hardware wallet. Collaborate with hardware and software developers to deliver a highly secure product. Responsibilities include threat modeling, security assessments, implementing security standards, and penetration testing. You will contribute to the definition of our security architecture and threat models. This role requires experience in embedded systems development with a focus on security and expertise in cryptographic protocols. Help us empower people and businesses to master their financial fate.

Requirements

• Bachelor's degree or equivalent professional experience in Computer Science, Electrical Engineering, or a related field
• 3+ years of professional experience in embedded systems development, with a focus on security
• Hands-on experience with cryptographic protocols (e.g., AES, ECC) and tools like fuzzers or debuggers
• Expertise in working with ARM TrustZone and secure elements
• Strong coding skills in C and C++ with secure coding practices
• Experience with penetration testing and secure software development

Responsibilities

• Perform detailed threat modeling and security assessments for the hardware wallet and critical components
• Collaborate with hardware and software teams to implement security standards and best practices
• Design and deploy technical solutions to mitigate identified security risks
• Create and maintain documentation for secure development processes
• Review and validate code to identify and address potential vulnerabilities
• Monitor and respond to security incidents
• Conduct penetration testing and simulate attack scenarios to identify vulnerabilities
• Stay informed on emerging security trends to enhance product security

Preferred Qualifications

• Knowledge of Qt/QML for user interface development
• Being a crypto and blockchain enthusiast
• Active participation in security communities (e.g., DEFCON, OWASP)