Embedded Security Engineer

Primary Responsibilities: Develop and maintain assigned subsystem or device security requirements by eliciting, deriving, allocating, and tracing customer and system requirements. Evaluate proposed and existing system architectures for reverse-engineering and cyber-exploitation vulnerabilities. Perform security-focused analysis and support coordination with Government assessment laboratories and internal security red teams. Document vulnerabilities, threats, and countermeasure recommendations in white papers and attack-countermeasure analyses. Develop system-level security design artifacts and requirements that address identified vulnerabilities in U.S. weapon systems. Develop and execute test plans for functional verification, including CPU, interconnect, eFPGA, power and clock-domain isolation, and provisioning-state transitions. Perform hands-on integration, test development, execution, troubleshooting, and results analysis. Support ASIC package and Development Kit design activities with external suppliers. Contribute to CI/CD test environments that enable automated hardware and software testing. Prepare technical material for customer and Government design reviews and participate in those reviews. Participate in system architecture, design, development, verification, and product-release activities. Communicate complex technical concepts clearly in writing to support proposals, engineering decisions, and new product opportunities. Contribute to product ideas, proposals, industry working groups, and security recommendations for applicable standards, policies, and procedures. Identify opportunities to improve engineering workflows, test automation, and AI-enabled analysis. What Sets You ApartMore than five years of demonstrated embedded-systems security design experience; DoD embedded-systems security experience is preferred. Experience with ASIC or SoC design and verification, particularly system-level security architecture and integration. Strong knowledge of cryptographic algorithms, their appropriate use, implementation vulnerabilities, and countermeasures. Strong understanding of hardware and software attacks and vulnerabilities, including the ability to evaluate mitigation approaches and residual risk. Strong understanding of computer hardware and software architectures, including CPUs, FPGAs, operating systems, and user-space application runtime environments. Ability to document complex technical concepts clearly for technical and general audiences. Strong analytical, problem-solving, and collaboration skills. Experience working with external customers or technical partners to resolve engineering requirements.