Software Security Analyst – Embedded Vulnerability Research

About the role

We are looking for a Senior Embedded Security Vulnerability Analyst to perform deep technical analysis of embedded systems, focusing on hardware/software boundary vulnerabilities. You will work with low‑level firmware, boot code and system components, and help shape AI‑assisted vulnerability discovery workflows.

Key responsibilities

• Perform in‑depth vulnerability analysis of embedded software, including bare‑metal, RTOS and trusted execution environments.
• Analyze boot flows, privilege boundaries and security‑critical components such as crypto libraries and isolation mechanisms.
• Develop and apply static analysis, fuzzing, scripting and automation tools, including AI‑assisted techniques.
• Support security certifications (e.g., PSA, SESIP, Common Criteria) and investigate PSIRT incidents.
• Collaborate with development teams to translate findings into concrete mitigations.

Required profile

• Strong analytical thinking and curiosity about adversarial system failures.
• Ability to work independently on complex technical investigations.
• Clear communication of technical findings to diverse audiences.
• Collaborative mindset when working with development and architecture teams.

Required skills

• Proficient in C programming; experience with ARM and/or RISC‑V architectures.
• Assembly‑level debugging and analysis (JTAG, trace, GDB).
• Experience with static and dynamic analysis tools, fuzzing, symbolic execution.
• Knowledge of common vulnerability classes (memory corruption, logic flaws, side‑channels).
• Experience with AI‑assisted code analysis or LLM‑based vulnerability discovery workflows.
• Familiarity with Rust or interest in memory‑safe system design.

What we offer

• Market‑competitive compensation benchmarked to the semiconductor industry.
• Home office options, flexible working time and hybrid work possibilities.
• Meal benefits and other attractive employee benefits.