Senior Advanced Firmware Engineer, Cybersecurity

As a Cybersecurity Senior Advanced Firmware Engineer, you will contribute to the development of secure firmware for a wide range of embedded products. Your role will include reviewing product specifications with a cybersecurity mindset and implementing robust, secure firmware solutions to meet the needs of Resideo's customers. You’ll work collaboratively with cross-functional teams to ensure products meet not only functional but also security and compliance requirements.

Join us and discover why a career with Resideo in embedded security is the opportunity you’ve been looking for!

JOB DUTIES:

• Design and develop secure firmware for existing and new products
• Integrate cryptographic libraries and implement secure boot, firmware signing, and key management mechanisms
• Facilitate secure builds using source control tools with security in mind (e.g., signed commits, SBOM tracking)
• Plan and estimate development tasks, including potential security impact assessments
• Support all phases of the secure software lifecycle: design, implementation, integration, testing, and release
• Participate in security-focused peer code reviews and maintain secure coding practices
• Collaborate with hardware, systems, and software teams to define and enforce firmware security requirements
• Assist in failure analysis with a focus on identifying security vulnerabilities and attack vectors
• Help maintain firmware and internal tools, including those for vulnerability scanning, security testing, and automation
• Contribute to documentation of secure design principles and product threat models
• Prototype security-focused proof-of-concepts and participate in internal security research initiatives

YOU MUST HAVE:

• 5+ years experience programming in C and/or C++, with exposure to Python or scripting languages
• An understanding of basic cryptography (e.g., encryption, hashing, certificates)
• Proven professional experience with, and knowledge of secure coding principles and embedded systems basics

WE VALUE:

• Strong interpersonal, verbal, and written communication skills
• Familiarity with Secure Boot, TPM, Trust Zone, or HSMs
• Knowledge of common embedded vulnerabilities (e.g., stack overflows, buffer management issues)
• Interest in or experience with firmware signing, OTA update security, and anti-rollback mechanisms
• Understanding of embedded security standards (e.g., NIST 800-193, ISO 21434, or IEC 62443)
• Passion for cybersecurity and eagerness to learn secure firmware development
• Understanding of protocols like RS-232, I2C, SPI, UART, and their potential attack surfaces
• Knowledge of embedded real-time operating systems (RTOS) and secure thread handling

WHAT'S IN IT FOR YOU:

• Innovation:
  Bring your creative ideas to the table and be part of a company that values out-of-the-box thinking
• Growth:
  Join a dynamic team with ample opportunities for professional and personal development
• Resideo provides employees with a comprehensive benefits package, including life and health insurance, life assistance program, accidental death and dismemberment insurance, disability insurance, retirement plans, vacation & holidays

#LI-JR2

#LI-HYBRID