Principal Embedded Security Vulnerability Analyst

About the role

We are looking for a Principal Embedded Security Vulnerability Analyst to lead deep technical analysis of embedded systems, focusing on hardware/software boundary vulnerabilities. You will drive discovery of complex flaws in firmware, boot code, and critical system components while shaping security architecture for next‑generation products.

Key responsibilities

• Lead in‑depth vulnerability analysis of embedded software, including bare‑metal, RTOS, and trusted execution environments.
• Analyze boot flows, privilege boundaries, crypto libraries, and isolation mechanisms, and assess exploitability.
• Define security evaluation strategies for certifications such as PSA, SESIP, and Common Criteria.
• Architect and develop advanced analysis tooling (static analysis, fuzzing, automation frameworks) and integrate AI‑assisted techniques.
• Mentor engineers, influence product architecture, and drive PSIRT incident analysis.

Required profile

• Expert analytical thinking with strong intuition for system failures under adversarial conditions.
• Ability to lead complex, ambiguous investigations end‑to‑end and influence technical direction across teams.
• Clear, authoritative communication of technical risks and a mentorship mindset.

Required skills

• Extensive C programming experience.
• Deep knowledge of ARM and/or RISC‑V architectures.
• Assembly‑level debugging and low‑level system analysis.
• Experience with JTAG, trace, GDB, static/dynamic analysis tools, fuzzing, and symbolic execution.
• Proven track record in vulnerability research, reverse engineering, or exploit development.
• Experience with AI‑assisted vulnerability discovery (LLM‑based workflows) and building automated analysis pipelines.
• Rust experience or strong interest in memory‑safe system design.

What we offer

• Competitive compensation benchmarked to the electronics and semiconductor industry.
• Home office options, flexible working time, and meal benefits.
• Opportunity to influence security architecture of modern embedded systems and silicon.