Senior Embedded Systems Security Engineer at CENSUS

Location: Abu Dhabi, Abu Dhabi Emirate
Type: Full-time
Level: Senior

Description

CENSUS is seeking a Senior Embedded Systems Security Engineer to join their Product Security Professional Services team. The role involves assessing cybersecurity products, conducting design reviews, implementing security assessments, and mitigating threats. This engineer will collaborate with client development and security teams to enhance product security, focusing on embedded systems within various industries.

Required Skills

Embedded Systems
Linux
Real Time Operating systems
ARM architecture
debugging
C
C++
Rust
Assembly (ARM)
secure boot
firmware & software integrity
OTA updates
hardware-backed device attestation
cryptographic primitives
cryptographic best practices
identifying and reporting security vulnerabilities
HW-backed security features
TEE
TPM
SE
SPU
Problem solving skills
analytical thinking
willingness to learn/grow
Proficient in English
excellent communication skills

Additional Information

Required Previous Experiences: 4+ years of experience in embedded, general- or special-purpose computer system-level software security.
Proven experience in developing, auditing, or testing security solutions for embedded, IoT, general computing or mobile / smartphone systems.
Preferred Qualifications: Experience with Embedded Systems, Linux, or Real Time Operating systems security concepts.
Experience with reviewing and researching system security architecture and engaged technologies.
Experience with ARM architecture and techniques to debug software running on these platforms.
Experience with C, C++, Rust, or Assembly (ARM) programming languages in the context of system software (bootloaders, drivers, kernel, system services, etc.).
Experience with secure boot, firmware & software integrity, OTA updates, and hardware-backed device attestation technologies.
Experience with cryptographic primitives and cryptographic best practices in the context of system security (inline crypto engines, storage encryption, attestation, HW key rooting, derivation, wrapping/unwrapping, etc.).
Experience in identifying and reporting security vulnerabilities on system software (memory corruption, side-channel attacks, business logic, etc.).
Familiarity with HW-backed security features for system hardening and security domains / trust-boundary separation (MPU, MMU/IOMMU, NX, DAC/MAC, stack canaries, securing heap allocators, etc.).
Familiarity with TEE, TPM, SE, SPU, and other related technologies to isolate execution of security critical operations.
Experience of working with international teams in other regions and time zones worldwide.
Problem solving skills, analytical thinking, and willingness to learn/grow.
Proficient in English and excellent communication skills.