[Hiring] Senior Embedded Product Cybersecurity Engineer @L4B Software

Role Description

We are looking for a Senior Embedded Product Cybersecurity Engineer who can translate cybersecurity risks and requirements into working technical controls within embedded products and platforms. You will work across both Product Cybersecurity and low-level platform security — from threat modelling and security architecture through implementation, integration, vulnerability remediation, and security verification.

You should be comfortable moving across:

• Threat Risk
• Security Requirement
• Architecture
• Technical Control
• Implementation
• Verification

And technically across:

• SoC
• Bootloader
• BSP
• Kernel
• TEE
• Embedded Linux / Android Platform
• System Services

This is a role for someone who understands not only what needs to be secured, but how to engineer it into the product.

Qualifications

• Strong professional experience in Embedded Product Cybersecurity, embedded platform security, or security engineering for embedded/connected products.
• Strong hands-on experience with Embedded Linux security at platform, BSP, system, and/or kernel level.
• Good understanding of product cybersecurity activities including threat modelling, attack-surface analysis, security requirements, vulnerability management, and security verification.
• Strong understanding of embedded boot flows and hardware root-of-trust / chain-of-trust concepts.
• Practical experience implementing or debugging Secure Boot, Verified Boot, or comparable security mechanisms.
• Experience with ARM TrustZone, OP-TEE, or another Trusted Execution Environment.
• Understanding of hardware-backed key management, secure storage, and cryptographic services.
• Experience working with ARM-based embedded SoCs and vendor BSPs.
• Embedded Linux build-system experience, ideally Yocto Project, OpenEmbedded, and BitBake.
• Strong C/C++ understanding with the ability to investigate platform-security issues at source-code level.
• Experience with vulnerability analysis and remediation of low-level platform components.
• Strong debugging and root-cause-analysis skills across multiple system layers.
• Hands-on Android/AOSP platform-security experience is highly valuable.

Requirements

• Perform threat modelling, attack-surface analysis, and product cybersecurity risk analysis.
• Translate identified threats and cybersecurity objectives into technical security requirements, architecture, and engineering controls.
• Design, implement, and review security mechanisms for Embedded Linux and Android/AOSP platforms.
• Integrate and troubleshoot Secure Boot, Verified Boot, and chain-of-trust mechanisms across hardware, bootloader, kernel, and operating system.
• Work with TEE/ARM TrustZone, secure storage, hardware-backed key management, RPMB, cryptographic services, and root-of-trust mechanisms.
• Implement and troubleshoot Linux and Android platform-security mechanisms such as dm-crypt, dm-verity, fs-verity, AVB, File-Based Encryption, KeyMint/Keymaster, SELinux, and rollback protection.
• Review kernel, BSP, and userspace configurations for security weaknesses, hardening opportunities, and unnecessary attack surface.
• Investigate security issues across SoC, bootloader, BSP, Device Tree, kernel, TEE, security firmware, and userspace.
• Support vulnerability management including CVE analysis, impact assessment, remediation, and verification, as well as SBOM/SCA and other security-analysis activities.
• Work with platform, validation, software, and quality teams to ensure cybersecurity requirements are correctly implemented, tested, and supported by engineering evidence.

Benefits

• Opportunity to work on cybersecurity where architecture meets implementation.
• Work alongside teams designing and customizing Embedded Linux and Android/AOSP platforms.
• Engage in building products for demanding and long-lifecycle environments.
• Focus on technical depth, relevant hands-on experience, problem-solving ability, and engineering ownership.