System Embedded Software Engineer — Security

System Embedded Software Engineer — Security Description
- The System Embedded Software Engineer — Security is responsible for designing, developing, and validating secure embedded software, firmware, and driver solutions for HP commercial PC platforms. This role focuses on building security into the full firmware lifecycle, including secure boot, cryptographic services, platform identity, device onboarding, firmware update protection, and runtime threat mitigation. The engineer works closely with hardware, BIOS, firmware, software, security, and product teams to identify risks, define secure implementation requirements, and resolve vulnerabilities before product release.

The role also requires strong technical documentation, security-focused design reviews, and awareness of emerging threats, industry standards, and best practices for embedded and firmware security.

• Leads the design and development of secure embedded software, firmware, and driver components for commercial PC platforms.
• Defines security requirements for firmware features, system interfaces, update mechanisms, device identity, and platform onboarding flows.
• Performs threat modeling, risk assessment, and secure design reviews across embedded software and firmware architectures.
• Implements and validates security capabilities such as secure boot, measured boot, cryptographic protocols, key management, access control, and firmware update protection.
• Investigates, reproduces, and resolves firmware security issues, including vulnerabilities found through internal testing, penetration testing, fuzzing, static analysis, or external reporting.
• Reviews code, design specifications, and project deliverables for compliance with security standards, secure coding practices, and platform firmware requirements.
• Collaborates with hardware, BIOS, OS, firmware, and cybersecurity teams to ensure end-to-end protection across the device security boundary.
• Creates and maintains technical documentation, including security architecture, interface specifications, protocol definitions, test plans, and mitigation plans.
• Drives continuous improvement in embedded security practices, including security automation, CI/CD integration, vulnerability scanning, and secure development lifecycle processes.
• Provides technical leadership and mentoring to engineers on secure firmware design, debugging, validation, and vulnerability remediation.

Recommended Bachelor or Master Degree in Computer Science, Computer Engineering, Electrical Cybersecurity, or a related discipline. 10+ years of experience in embedded software, firmware, driver development, or product security, with hands‑on experience delivering secure firmware or embedded systems.

• Software Engineering Secure embedded systems development, including bare metal, RTOS, boot loader, and low-level firmware environments.
• Experience with embedded security architecture, device identity, secure provisioning, secure onboarding, and low-footprint cryptographic implementations.
• Knowledge of secure coding practices, vulnerability classes, memory safety risks, and defensive firmware design techniques.
• Experience building fault‑tolerant, tamper‑resistant, and highly reliable embedded systems.
• CI/CD pipeline expertise for embedded systems, including automated security testing, static analysis, signing, and release validation.

• Embedded security development experience in cryptography, authentication, secure protocols, certificate handling, and key management. Experience securing wireless, peripheral, and interconnect protocol stacks across multiple connectivity technologies. Understanding of protocol‑level security, transport…