Remote Embedded Security Engineer

Summary

The job is for a Backend Engineer at Thistle Technologies, focusing on device security in the IoT field. The role involves taking product concepts from incubation to production, collaborating with various teams, and engaging with open source communities. The qualifications required include extensive experience in embedded security, low-level software development, cryptography, and familiarity with hardware security mechanisms.

Requirements

• 8+ years of experience building and shipping production software in the embedded security area
• Professional experience of low-level embedded software development in C/C++ or Rust, also including ability to set up CI/CD pipelines for automated testing and deployment
• Interest in opportunities and challenges in a startup environment, with respect to product building
• Deep knowledge of hardware security mechanisms, in particular, secure boot, trusted execution environment, inter-processor communications, and debugging interfaces. Hands-on experience with them
• Deep knowledge of embedded firmware and operating system security principles
• Understanding of cryptography primitives for data authenticity and confidentiality, as well as implementation experience with respect to their applications under different circumstances
• Familiarity with the concepts of PKI, secure communication, key derivation and key management
• Fluency in conventional applied cryptography such as AES, hashing, ECC and RSA; basic knowledge of quantum-safe cryptography
• Software security experience, specifically, exploitation techniques in embedded systems, reverse engineering in firmware, and design and development of anti-exploitation countermeasures

Responsibilities

• Take product concepts in device security from incubation to demonstration, and eventually to production
• Co-maintain existing product features in the Thistle Security Platform
• Design, develop, deploy and maintain new device security features to evolve and shape the Thistle Security Platform
• Collaborate closely with backend engineers, product, and business development. Support sales calls as needed
• Engage with open source and developer communities to advocate and demonstrate Thistle Security Platform's capabilities with respect to device security

Preferred Qualifications

• Experience in device key provisioning systems in a manufacturing environment
• Experience in manual or automated security testing of embedded systems
• Experience in manual and code-scanner assisted security code review and vulnerability triaging
• Experience in building code signing tools/systems using secure hardware, hardware security modules or Cloud-based key management systems

Benefits

• Competitive salary and equity
• Health, dental, and vision plan options with premium contribution from Thistle
• 401(k) plan
• Unlimited time-off policy
• 4-day work week
• Fully distributed and remote team