Senior Embedded Security Test Engineer

Sigma Inc.
United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
4 years minimum
Working hours
Shift work
Languages
English
Job source

Tech stack

Cyber Security Dynamic Program Analysis Firmware Fuzz Testing Hardware Interface Design Software Security

Job description

If you are passionate about embedded systems and want to work on real products with a strong focus on security and compliance, this opportunity is for you. We are looking for Embedded Security Test Engineer to join our team and contribute to projects that demand high safety and reliability standards.

Why join us? You will work on cutting-edge embedded solutions, gain expertise in EU Cyber Resilience Act compliance, and be part of a supportive international team.

Customer

Our customer is one of the leading manufacturers of industrial valves and pumps worldwide. They are currently focusing on enhancing product security to meet upcoming EU Cyber Resilience Act requirements, ensuring their solutions remain reliable and compliant in demanding industrial environments.

Project

The project centers on securing embedded products, with a primary goal of achieving compliance with the EU Cyber Resilience Act (CRA). You will be involved in firmware and software security testing, threat analysis, risk assessment, gap analysis, evidence collection, and preparing audit-ready documentation. The embedded solutions target applications involving the transportation of liquids, which demands robust safety and security measures.

Key Technologies: TARA methodology, static/dynamic analysis tools, hardware interface testing., * Execute security testing of embedded firmware and software components

  • Lead and support the team in conducting TARA (Threat Analysis and Risk Assessment) for embedded products
  • Drive internal CRA self-assessment: gap analysis, evidence collection, and remediation guidance
  • Document test results, risk findings, and audit-ready artefacts
  • Build effective communication with the customer
  • Contribute to developing future cybersecurity competency within the company

  • Diversity of Domains & Businesses
  • Variety of technology
  • Health & Legal support
  • Active professional community
  • Continuous education and growing
  • Flexible schedule
  • Remote work
  • Outstanding offices (if you choose it)
  • Sports and community activities

Requirements

Do you have experience in Test scanning software?, Security Testing / expert TARA Methodology / good Firmware Security Analysis / strong Cybersecurity Compliance / strong Communication Skills / strong, * Minimum 4 years of experience in cybersecurity testing

  • Hands-on experience in embedded/firmware security testing (fuzzing, static/dynamic analysis, hardware interfaces)
  • Practical knowledge of TARA methodology
  • Familiarity with CRA requirements and credible self-assessment processes
  • Ability to communicate security findings clearly and translate risks into actionable tasks
  • Upper-Intermediate or higher English proficiency
  • Willingness to travel for occasional customer visits 3-4 times per year

WILL BE A PLUS:

  • Experience with industrial embedded platforms
  • Prior involvement in regulatory or certification audits (IEC 62443, ISO 21434, EN 303 645)
  • Ability to advise development teams on IEC 62443 control applicability, * Comfortable working in cross-functional teams
  • Effective communicator with customers and internal stakeholders

Benefits & conditions

Pulled from the full job description

  • Flexible schedule

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:20 min

Certifying safety-critical automotive software and deploying progressive testing strategies

David Romić · WWC 2023

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

3:40 min

Integrating mutation testing and fuzzing into software workflows

Michael Contento · WWC 2023

2:19 min

Orchestrating over-the-air firmware updates for vehicle modules

Denis Grahovac · WWC 2021

1:57 min

Following security research and continuous developer education

Martin Schmiedecker · LIVE

3:58 min

Exploring advanced security tooling and community dependency vetting

Niels Tanis Niels Tanis · WWC 2024

Videos

See all

Related articles

See all