Hardware Security Engineer

PROLIM Global Corporation
Pittsburgh, PA, United States
3 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Working hours
Regular working hours
Job source

Tech stack

Adobe Flash Java (Programming Language) Artificial Intelligence Software System Penetration Testing Public-Key Cryptography User Authentication Automation of Tests Booting (BIOS) Communications Protocols Cyber Security Computer Programming Computer Engineering
+15 more
Firmware Hardware Security Module Identity and Access Management Joint Test Action (IEEE Standards) Python (Programming Language) Key Management Public Key Infrastructure X.509 Reverse Engineering Strategies of Testing Universal Asynchronous Receiver/Transmitter SSL Certificate Management Information Technology U-Boot Hardware Debugging

Job description

We are seeking an experienced Hardware & Embedded Security Engineer with strong expertise in hardware security testing, embedded systems security, threat modeling, and cybersecurity assessments. The ideal candidate will have hands-on experience evaluating embedded hardware platforms, identifying security vulnerabilities, and implementing security validation strategies for industrial and connected products., * Perform hardware and embedded product threat modeling, identify security requirements, and conduct penetration testing and risk assessments.

  • Review chipset security features, technical specifications, and datasheets to recommend secure hardware platforms.
  • Participate in architecture reviews covering Hardware Root of Trust, secure boot, bootloaders, certificate management, and cryptographic key storage.
  • Set up and operate hardware security testing tools to assess embedded products and identify vulnerabilities.
  • Automate hardware security testing, including secure boot and secure firmware upgrade validation.
  • Develop scripts and automation frameworks using Python or Java and tools such as OpenOCD.
  • Evaluate security controls and recommend mitigation strategies to product development teams.
  • Support cybersecurity assessments, product security reviews, and validation activities.
  • Maintain hardware security laboratory environments and contribute to research and development initiatives.

Requirements

  • Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field.
  • 4+ years of hands-on experience in threat modeling and hardware security testing.
  • Strong understanding of hardware security technologies, including TPM, HSM, TrustZone, and Secure Elements.
  • Experience with embedded systems security, hardware security architectures, and secure boot.
  • Knowledge of cybersecurity standards and protocols such as IEC 62443, UL 2900, IEC 15118, SAE J21434, PKCS, Matter, and OCPP.
  • Hands-on experience with hardware debugging or security testing tools such as OpenOCD.
  • Programming and scripting experience using Python or Java.
  • Strong understanding of networking, communication protocols, authentication, and identity management.
  • Ability to analyze embedded product security risks and recommend appropriate mitigation strategies., * Experience with hardware supplier risk assessments.
  • Knowledge of side-channel analysis and fault injection attacks.
  • Understanding of symmetric and asymmetric cryptography, PKI, X.509 certificates, and secure key management.
  • Familiarity with secure firmware development, secure provisioning, and hardware security validation.
  • Experience with AI-based tools used in cybersecurity applications.

Technical Skills & Keywords

Hardware Security, Embedded Security, Threat Modeling, Hardware Penetration Testing, Secure Boot, Hardware Root of Trust, TPM, HSM, TrustZone, Secure Elements, OpenOCD, Python, Java, JTAG, SWD, UART, SPI Flash, Firmware Reverse Engineering, Ghidra, JTAGulator, ChipWhisperer, Fault Injection, Side-Channel Analysis, Cryptography, PKI, X.509, IEC 62443, UL 2900, SAE J21434, IEC 15118, OCPP, Matter, Networking, Authentication, Identity Management.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Loading talks and stories from around this role…