Hardware Security Engineer

Quick Facts

• Focus: Hardware and embedded security testing for industrial/connected products

Description

This role combines hardware and embedded security engineering with hands-on testing and validation. You will perform threat modeling, review chipset security features, and assess secure boot, bootloaders, certificate/key management, and cryptographic key storage on embedded hardware platforms. You will also automate hardware security tests and produce security risk findings and mitigation recommendations.

Responsibilities

• Perform hardware and embedded product threat modeling, identify security requirements, and conduct penetration testing and risk assessments
• Review chipset security features and technical specifications/datasheets to recommend secure hardware platforms
• Participate in architecture reviews covering Hardware Root of Trust, secure boot, bootloaders, certificate management, and cryptographic key storage
• Set up and operate hardware security testing tools to assess embedded products and identify vulnerabilities
• Automate hardware security testing, including secure boot and secure firmware upgrade validation
• Develop scripts and automation frameworks using Python or Java and tools such as OpenOCD
• Evaluate security controls and recommend mitigation strategies to product development teams
• Support cybersecurity assessments, product security reviews, and validation activities
• Maintain hardware security laboratory environments and contribute to research and development initiatives

Requirements

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related field
• 4+ years of hands-on experience in threat modeling and hardware security testing
• Strong understanding of hardware security technologies including TPM, HSM, TrustZone, and Secure Elements
• Experience with embedded systems security, hardware security architectures, and secure boot
• Knowledge of cybersecurity standards and protocols including IEC 62443, UL 2900, IEC 15118, SAE J21434, PKCS, Matter, and OCPP
• Hands-on experience with hardware debugging or security testing tools such as OpenOCD
• Programming and scripting experience using Python or Java
• Strong understanding of networking, communication protocols, authentication, and identity management
• Ability to analyze embedded product security risks and recommend appropriate mitigation strategies

Benefits

• Opportunity to work on embedded hardware security validation using lab tooling and automation