Senior Embedded Product Cybersecurity Engineer

Senior Embedded Product Cybersecurity Engineer

About L4B Software

L4B Software specializes in embedded software engineering, platform development and product cybersecurity. We work with Embedded Linux, Android/AOSP, board support packages (BSPs) and real-time embedded systems to develop reliable, secure and maintainable software platforms.

Our engineering work supports industries including medical devices, consumer electronics and other connected embedded products where security must be integrated throughout the product lifecycle.

About the Role

We are looking for a Senior Embedded Product Cybersecurity Engineer with strong hands-on experience securing embedded devices and connected products, particularly in consumer electronics or medical-device environments.

This is a hands-on engineering position, not a general IT cybersecurity, SOC, network security or compliance-only role.

You will work directly with embedded software, platform and product-engineering teams to design, implement, test and maintain security mechanisms across device hardware, bootloaders, operating systems, firmware and software-update infrastructure.

We are particularly interested in engineers who have contributed to security architectures and controls in real products, from development and integration through production release and ongoing maintenance.

Key Responsibilities

1. Embedded Product Security Architecture

• Design and implement security architectures for Embedded Linux, Android/AOSP and other embedded platforms.
• Perform device-level threat modeling, attack-surface analysis and security risk assessments.
• Identify threats involving physical device access, debug interfaces, firmware extraction, communication interfaces and software vulnerabilities.
• Translate security requirements into practical technical controls and engineering tasks.
• Collaborate with hardware, BSP, platform and application engineers to implement security by design.

2. Secure Boot, Device Identity and Cryptography

• Implement and validate Secure Boot, Verified Boot and chain-of-trust mechanisms.
• Work with hardware-backed security technologies such as TPM, HSM, secure elements, ARM TrustZone and OP-TEE, as applicable.
• Design secure device identity, key provisioning, key storage and key lifecycle mechanisms.
• Implement cryptographic signing, integrity verification and secure firmware authentication.
• Support secure manufacturing provisioning and device lifecycle security.

3. Embedded Linux and Android Platform Hardening

• Implement security controls within Embedded Linux and, where applicable, Android/AOSP platforms.
• Harden bootloaders, Linux kernels, operating-system configurations and device services.
• Work with Linux security mechanisms such as SELinux, AppArmor, dm-verity, dm-crypt and filesystem protection.
• Reduce attack surfaces by securing services, ports, permissions, interfaces and debug capabilities.
• Collaborate with Yocto/BSP engineers to integrate security controls into production firmware images.

4. Secure Firmware Updates and Product Lifecycle Security

• Design and implement secure firmware and OTA update mechanisms.
• Ensure firmware authenticity, integrity, rollback protection and secure recovery.
• Support secure update architectures for connected and field-deployed products.
• Investigate product vulnerabilities and contribute to remediation across supported software versions.
• Help establish security maintenance practices for products throughout their operational lifecycle.

5. Vulnerability Management and Security Verification

• Perform vulnerability analysis across embedded firmware, operating systems, libraries and third-party components.
• Work with CVE databases, software composition analysis and SBOM generation.
• Assess vulnerability exploitability and product-specific security impact.
• Support static analysis, dynamic analysis, firmware analysis and penetration-testing activities.
• Develop or integrate security verification into CI/CD pipelines.
• Document security findings, remediation actions and verification evidence.

6. Product Security and Engineering Collaboration

• Work closely with Embedded Linux, Android/AOSP, BSP, hardware, DevSecOps, QA and product-engineering teams.
• Participate in security design reviews and technical risk assessments.
• Support security requirements, verification and traceability for regulated or security-sensitive products.
• Contribute to product-security documentation and technical security decisions.
• Independently investigate and resolve complex embedded security issues.

Required Qualifications and Experience

• Strong professional experience in embedded software engineering, with substantial hands-on responsibility for embedded product cybersecurity.
• Professional experience securing consumer electronics, medical devices or comparable connected embedded products.
• Strong understanding of embedded hardware, firmware, bootloaders, operating systems and device security boundaries.
• Hands-on experience implementing security controls in Embedded Linux, Android/AOSP or comparable embedded platforms.
• Demonstrated practical experience in several of the following:
• Secure Boot, Verified Boot or hardware root of trust.
• Secure key storage, provisioning and cryptographic integration.
• Embedded Linux security hardening.
• Secure firmware updates and rollback protection.
• Device-level threat modeling and attack-surface reduction.
• Embedded vulnerability analysis and remediation.
• Strong Linux debugging and embedded systems troubleshooting skills.
• Proficiency in C/C++ and scripting with Python or Bash.
• Ability to independently own technical security tasks from design through implementation and verification.
• Experience working with cross-functional product-development teams.

Preferred Qualifications

• Direct experience with consumer electronics, connected devices, smart home products, multimedia devices, wearables or other commercially deployed embedded products.
• Experience developing or securing medical-device software, connected medical equipment or regulated healthcare products.
• Practical experience with ARM TrustZone, OP-TEE, TPM, secure elements or hardware security modules.
• Experience with Yocto/OpenEmbedded, U-Boot, Linux kernel configuration and BSP security integration.
• Android Verified Boot (AVB), Android security architecture or SELinux policy development.
• Secure OTA frameworks and firmware-signing infrastructure.
• Experience with SBOM tooling, CVE assessment and software composition analysis.
• Familiarity with applicable product-security standards and guidance, such as IEC 62443, ETSI EN 303 645, IEC 81001-5-1, IEC 62304, ISO 14971 or relevant EU Cyber Resilience Act requirements.
• Experience supporting security verification, technical documentation and product-security audits.
• Experience working on products requiring long-term security maintenance and vulnerability response.

What We Are Looking For

We are particularly interested in engineers who can demonstrate:

• Security mechanisms they have personally designed, implemented, integrated or validated.
• Experience working with actual embedded products rather than security concepts alone.
• Understanding of how hardware, firmware, operating systems and connectivity affect device security.
• Ability to investigate vulnerabilities and implement practical remediation.
• Ownership of technical decisions and security deliverables.
• Clear communication with embedded engineering and product teams.

Important: This position requires practical embedded product-security engineering experience. General IT security, SOC operations, infrastructure security, penetration testing without embedded-product engineering, or compliance-only experience will not independently meet the role requirements.

Why Join L4B Software

• Work on embedded platform and product-security engineering challenges.
• Contribute to secure software platforms used in complex connected products.
• Collaborate with international engineering teams.
• Take ownership of meaningful security design and implementation responsibilities.
• Work in an environment where technical depth, independent problem-solving and engineering quality matter.

Application

Please share your resume highlighting the embedded products and platforms you have worked on, the security mechanisms you personally implemented, and your experience with production or commercially deployed devices.

L4B Software is committed to fair and inclusive recruitment. Candidates will be assessed on demonstrated technical capabilities and alignment with the requirements of the role.