> Markdown version of [/jobs/ext/4619401-offensive-firmware-security-engineer](https://www.wearedevelopers.com/jobs/ext/4619401-offensive-firmware-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Offensive Firmware Security Engineer

- **Company:** Mediatek Inc
- **Location:** San Jose, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** C (Programming Language), Software System Penetration Testing, AUTomotive Open System Architecture (AUTOSAR), C++ (Programming Language), Cyber Security, Computer Programming, Computer Engineering, Software Debugging, Linux, Firmware, Hypervisor, Joint Test Action (IEEE Standards), Python (Programming Language), Reverse Engineering, Secure Coding, Information Technology, IDA Pro, Vulnerability Analysis
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_c61175545c1d6c08f7a26d095af7a391

## About the Role

* BS+ in Computer Engineering, Computer Science, or Electrical Engineering.
 * 7+ years of relevant work experience
 * Programming background in ARM/RISCV assembly, Python, C, C++, and/or RUST
 * Knowledge of embedded system architecture and security (e.g. Android/Linux, ARM trust zone, hypervisor/virtualization…etc.).
 * Knowledge of hardware/software vulnerabilities and their exploit techniques
 * Experience with security design review or threat modeling throughout hardware to software.
 * Experience with secure code review, analysis, vulnerability assessment, hacking/attack analysis.
 * Motivated by pursuing difficult and novel problems in a highly complex environment
 * Excellent at multitasking, organizing, and prioritizing complex projects to meet deadlines
 * Listens for nuances and digs into details to understand systems deeply

Preferred Requirement

 * experience on any automotive grade platform such as AUTOSAR, QNX, Android Automotive, etc.
 * JTAG, debugging, binary instrumentation frameworks, Reverse-engineering (IDA Pro, Ghidra)
 * ISO21434 or ISO 26262 compliance experience
 * TARA or HARA methodology and execution experience
 * CACSE (Certified Automotive Cyber-Security Expert) certificate
 * CACSP (Automotive Cyber-Security Professional) certificate

## Description

* Perform security architecture design review and threat analysis of firmware and hardware , to ensure security properties and robustness of our complex software products
 * Identify vulnerabilities in our firmware, build proof of concepts, and drive remediation via secure code reviews, fuzz and penetration testing
 * Recommend security controls, evangelize and drive adoption of new or improved tools, practices, and plans to increase product robustness and reliability.
 * Collaborate with engineers, customers, and/or partners to perform internal or external security audits on our products to ensure the security quality.
 * Respond to product security incidents, coordinate engineering teams and partners to solve security related issues
 * Work with other parts of our company on a broad range of technologies and initiatives to enhance security.
 * Research and exploit side-channel, fault, and advanced physical attacks