Firmware Engineer - Cybersecurity

• Participate in the design, implementation, and test of embedded firmware systems with emphasis on cybersecurity.
• Design and implement security features such as secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging.
• Apply secure coding practices, threat modeling, and security design reviews throughout the firmware development lifecycle.
• Perform security testing and vulnerability analysis, including static analysis, fuzzing, and penetration testing; analyze and remediate identified vulnerabilities.
• Understand hardware and software interactions, and collaborate with Hardware Engineers on hardware-based security features (e.g., secure elements, TPMs, hardware crypto accelerators, and debug-port protection).
• Support compliance with applicable cybersecurity standards and customer requirements (e.g., NERC CIP, IEC 62443, IEEE 1686, and NIST guidance).
• Prepare and maintain security requirements, designs, and test documentation.
• Mentor Associate Engineers and Technicians in secure development practices.

Typically 2+ years’ experience in embedded systems firmware development including:

• Real-time firmware design
• C, C++ and assembly languages
• Embedded Linux systems development (C, C++, Python, and other scripting languages)

Working knowledge of cybersecurity fundamentals for embedded systems, including:

• Applied cryptography (symmetric/asymmetric encryption, hashing, digital signatures, PKI, TLS)
• Secure boot and secure firmware update
• Secure coding practices and memory-safety vulnerabilities
• Threat modeling and risk assessment

Strong writing, documentation, and speaking skills

Ability to learn new skills and assume new responsibilities

Ability to work cooperatively in a team environment, * Experience with static analysis, fuzzing, and penetration testing tools

• Experience with hardware security features (secure elements, TPMs, TrustZone or equivalent, hardware crypto engines)
• Experience with secure network protocols and role-based access control
• Knowledge of cybersecurity standards (NERC CIP, IEC 62443, IEEE 1686, NIST)
• Security certifications (e.g., CSSLP, GICSP, or similar)
• Industrial controls
• 3-phase electric power systems
• Modern communications protocols
• Digital and analog circuitry
• Digital communications and signal processing
• Project management

People are at the core of our company and we hire employee-owners. We welcome you to learn more about how we support employees.

• We’re 100% employee owned. Retirement benefits include an employer funded stock ownership plan (ESOP) and personal 401(k) options.
• We offer top tier medical, prescription, dental, vision, life, and disability insurance.
• We recognize the importance of a healthy life balance and offer: 10 paid holidays, annual vacation accrual starting at 12 days, 9 paid sick days, and paid family and medical leave that covers 90% of your pay.
• We foster growth and development of our employees through avenues such as STEM courses, apprenticeships, tuition assistance, and engineering development programs.
• Ask our team about other benefits including wellness, fertility, adoption, and flexible spending benefits.

Salary Range Data

We anticipate filling this position as a Firmware Engineer: $89,000 - $134,100 annually. Our compensation ranges are based on the responsibilities of the role. Starting pay is determined individually and considers factors such as relevant experience, skills, knowledge, and training. Candidates may be considered at different levels based on their background. As a result, pay may vary to align with the level of the role.