Embedded Security Engineer

Location: South Tyneside
Working Pattern: Hybrid, up to 2 days working from home
Employment Type: Permanent
Salary: Competitive + Bonus + Benefits

We are looking for an experienced Embedded Security Expert to join an established engineering team developing secure embedded products for critical infrastructure within the energy and power sector.

This is not a traditional IT or enterprise cybersecurity position. It is a hands‑on embedded software security role, combining C/C++ engineering with product security, secure architecture and the implementation of cybersecurity requirements directly within embedded devices and firmware.

Working within a multidisciplinary engineering team, you will help ensure products are secure by design and meet evolving cybersecurity requirements.

• Define and implement security requirements and features within embedded software and firmware
• Develop secure embedded software using C/C++ and contribute to secure product architecture
• Perform threat modelling, security risk assessments, vulnerability assessments and design reviews
• Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements
• Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team

• Strong commercial experience developing embedded software using C and/or C++
• Practical understanding of embedded systems including ARM architectures, RTOS environments and bootloaders
• Hands‑on experience implementing cybersecurity controls within embedded products, devices or firmware
• Good understanding of secure software development, threat modelling, vulnerability assessment and security testing
• Experience working within a product development environment and translating security requirements into practical engineering solutions

• Secure Boot, secure firmware updates and secure device provisioning
• Cryptography including AES, RSA, ECC and TLS
• PKI, certificate management, secure key storage and key management
• Product security standards such as IEC 62443, IEC 62351 or the Cyber Resilience Act
• Security engineering within power systems, energy, industrial automation, control systems, IEDs or other critical infrastructure environments

You do not need experience across every technology or standard listed. The key requirement is a strong combination of embedded software engineering and practical product security, with the ability to turn cybersecurity requirements into secure, working embedded solutions.

You will join a collaborative engineering operation in South Tyneside as part of a multidisciplinary team developing long‑lifecycle embedded products.

This is a hands‑on environment where everyone is expected to contribute and take ownership. You will have the opportunity to become a key point of expertise for embedded security, working alongside software, hardware, systems and test engineers as security requirements continue to increase across the product portfolio.

The role is based in South Tyneside with up to two days per week working from home. Flexible working hours are available to help accommodate commitments outside work.

• 26 days’ annual leave plus bank holidays, with the option to purchase an additional 5 days
• Employer pension contribution of up to 10%
• Annual company performance‑related bonus of approximately 5%
• Subsidised healthcare
• Salary sacrifice benefits and flexible working hours

If you are an embedded software engineer with a strong interest or background in product cybersecurity and want to work on technology where security, reliability and resilience genuinely matter,

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero‑tolerance policy for breaches of our Equality and Diversity policy.