{"id":3299629,"url":"https://alion.io/job/l4b-senior-embedded-product-cybersecurity-engineer","title":"Senior Embedded Product Cybersecurity Engineer","company":{"id":1048098,"name":"L4B","domain":"l4b.group","url":"https://alion.io/company/l4b","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":42,"open_postings":10,"ghost_share":0.8,"stale_share":0,"repost_share":1,"time_to_fill_p50_days":3,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"CVE","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true},{"name":"IEC 62304","optional":true},{"name":"ISO 14971","optional":true},{"name":"U-Boot","optional":true}],"status":"live","first_seen_at":"2026-10-26T22:18:22Z","employer_posted_date":null,"last_verified_at":"2026-10-26T22:18:22Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"Senior Embedded Product Cybersecurity Engineer\nAbout L4B Software\nL4B Software specializes in embedded software engineering, platform development and product cybersecurity. We work with Embedded Linux, Android/AOSP, board support packages (BSPs) and real-time embedded systems to develop reliable, secure and maintainable software platforms.\nOur engineering work supports industries including medical devices, consumer electronics and other connected embedded products where security must be integrated throughout the product lifecycle.\nAbout the Role\nWe are looking for a Senior Embedded Product Cybersecurity Engineer with strong hands-on experience securing embedded devices and connected products, particularly in consumer electronics or medical-device environments.\nThis is a hands-on engineering position, not a general IT cybersecurity, SOC, network security or compliance-only role.\nYou will work directly with embedded software, platform and product-engineering teams to design, implement, test and maintain security mechanisms across device hardware, bootloaders, operating systems, firmware and software-update infrastructure.\nWe are particularly interested in engineers who have contributed to security architectures and controls in real products, from development and integration through production release and ongoing maintenance.\nKey Responsibilities\n1. Embedded Product Security Architecture\nDesign and implement security architectures for Embedded Linux, Android/AOSP and other embedded platforms.\nPerform device-level threat modeling, attack-surface analysis and security risk assessments.\nIdentify threats involving physical device access, debug interfaces, firmware extraction, communication interfaces and software vulnerabilities.\nTranslate security requirements into practical technical controls and engineering tasks.\nCollaborate with hardware, BSP, platform and application engineers to implement security by design.\n2. Secure Boot, Device Identity and Cryptography\nImplement and validate Secure Boot, Verified Boot and chain-of-trust mechanisms.\nWork with hardware-backed security technologies such as TPM, HSM, secure elements, ARM TrustZone and OP-TEE, as applicable.\nDesign secure device identity, key provisioning, key storage and key lifecycle mechanisms.\nImplement cryptographic signing, integrity verification and secure firmware authentication.\nSupport secure manufacturing provisioning and device lifecycle security.\n3. Embedded Linux and Android Platform Hardening\nImplement security controls within Embedded Linux and, where applicable, Android/AOSP platforms.\nHarden bootloaders, Linux kernels, operating-system configurations and device services.\nWork with Linux security mechanisms such as SELinux, AppArmor, dm-verity, dm-crypt and filesystem protection.\nReduce attack surfaces by securing services, ports, permissions, interfaces and debug capabilities.\nCollaborate with Yocto/BSP engineers to integrate security controls into production firmware images.\n4. Secure Firmware Updates and Product Lifecycle Security\nDesign and implement secure firmware and OTA update mechanisms.\nEnsure firmware authenticity, integrity, rollback protection and secure recovery.\nSupport secure update architectures for connected and field-deployed products.\nInvestigate product vulnerabilities and contribute to remediation across supported software versions.\nHelp establish security maintenance practices for products throughout their operational lifecycle.\n5. Vulnerability Management and Security Verification\nPerform vulnerability analysis across embedded firmware, operating systems, libraries and third-party components.\nWork with CVE databases, software composition analysis and SBOM generation.\nAssess vulnerability exploitability and product-specific security impact.\nSupport static analysis, dynamic analysis, firmware analysis and penetration-testing activities.\nDevelop or integrate security verification into CI/CD pipelines.\nDocument security findings, remediation actions and verification evidence.\n6. Product Security and Engineering Collaboration\nWork closely with Embedded Linux, Android/AOSP, BSP, hardware, DevSecOps, QA and product-engineering teams.\nParticipate in security design reviews and technical risk assessments.\nSupport security requirements, verification and traceability for regulated or security-sensitive products.\nContribute to product-security documentation and technical security decisions.\nIndependently investigate and resolve complex embedded security issues.\nRequired Qualifications and Experience\nStrong professional experience in embedded software engineering, with substantial hands-on responsibility for embedded product cybersecurity.\nProfessional experience securing consumer electronics, medical devices or comparable connected embedded products.\nStrong understanding of embedded hardware, firmware, bootloaders, operating systems and device security boundaries.\nHands-on experience implementing security controls in Embedded Linux, Android/AOSP or comparable embedded platforms.\nDemonstrated practical experience in several of the following:\nSecure Boot, Verified Boot or hardware root of trust.\nSecure key storage, provisioning and cryptographic integration.\nEmbedded Linux security hardening.\nSecure firmware updates and rollback protection.\nDevice-level threat modeling and attack-surface reduction.\nEmbedded vulnerability analysis and remediation.\nStrong Linux debugging and embedded systems troubleshooting skills.\nProficiency in C/C++ and scripting with Python or Bash.\nAbility to independently own technical security tasks from design through implementation and verification.\nExperience working with cross-functional product-development teams.\nPreferred Qualifications\nDirect experience with consumer electronics, connected devices, smart home products, multimedia devices, wearables or other commercially deployed embedded products.\nExperience developing or securing medical-device software, connected medical equipment or regulated healthcare products.\nPractical experience with ARM TrustZone, OP-TEE, TPM, secure elements or hardware security modules.\nExperience with Yocto/OpenEmbedded, U-Boot, Linux kernel configuration and BSP security integration.\nAndroid Verified Boot (AVB), Android security architecture or SELinux policy development.\nSecure OTA frameworks and firmware-signing infrastructure.\nExperience with SBOM tooling, CVE assessment and software composition analysis.\nFamiliarity with applicable product-security standards and guidance, such as IEC 62443, ETSI EN 303 645, IEC 81001-5-1, IEC 62304, ISO 14971 or relevant EU Cyber Resilience Act requirements.\nExperience supporting security verification, technical documentation and product-security audits.\nExperience working on products requiring long-term security maintenance and vulnerability response.\nWhat We Are Looking For\nWe are particularly interested in engineers who can demonstrate:\nSecurity mechanisms they have personally designed, implemented, integrated or validated.\nExperience working with actual embedded products rather than security concepts alone.\nUnderstanding of how hardware, firmware, operating systems and connectivity affect device security.\nAbility to investigate vulnerabilities and implement practical remediation.\nOwnership of technical decisions and security deliverables.\nClear communication with embedded engineering and product teams.\nImportant: This position requires practical embedded product-security engineering experience. General IT security, SOC operations, infrastructure security, penetration testing without embedded-product engineering, or compliance-only experience will not independently meet the role requirements.\nWhy Join L4B Software\nWork on embedded platform and product-security engineering challenges.\nContribute to secure software platforms used in complex connected products.\nCollaborate with international engineering teams.\nTake ownership of meaningful security design and implementation responsibilities.\nWork in an environment where technical depth, independent problem-solving and engineering quality matter.\nApplication\nPlease share your resume highlighting the embedded products and platforms you have worked on, the security mechanisms you personally implemented, and your experience with production or commercially deployed devices.\nL4B Software is committed to fair and inclusive recruitment. Candidates will be assessed on demonstrated technical capabilities and alignment with the requirements of the role.","description_format":"text","description_chars":8524,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Road Transport","Health & Medical Electronics"],"lifecycle":[{"event":"open","at":"2026-10-26T23:09:45Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.438,"p_room":0.35,"age_days":10,"expected_fill_days":3,"reasons":["seen:10","stale_co","win:tail"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/l4b-senior-embedded-product-cybersecurity-engineer","json_url":"https://alion.io/job/l4b-senior-embedded-product-cybersecurity-engineer.json","meta":{"generated_at":"2026-11-06T13:38:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25053,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1048098},"rest":"https://alion.io/mcp/rest/get_company?id=1048098"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fl4b-senior-embedded-product-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fl4b-senior-embedded-product-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fl4b-senior-embedded-product-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/l4b-senior-embedded-product-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fl4b-senior-embedded-product-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3299629}},{"tool":"search_jobs","arguments":{"company":"l4b.group","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3299629},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}