Sr. Staff Firmware Security Architect (Automotive)

Location: Sunnyvale, United States

Salary: $189,240–$266,760 per year

Company

hirify.global is a mobility AI company and the Global Software Center of Hyundai Motor Group, developing software-defined vehicle technologies and autonomous urban transportation systems.

What you will do

• Own the end-to-end security architecture for a next-generation software-defined vehicle real-time platform.
• Define the multi-stage secure boot chain, anti-rollback controls, recovery policies, hardware root of trust, isolation boundaries, and secure debug processes.
• Design the Uptane trust model and secure over-the-air update path, including metadata roles, signature thresholds, key rotation, and defenses against rollback, replay, freeze, and mix-and-match attacks.
• Specify cryptographic policy, vehicle-lifecycle key management, provisioning, revocation, attestation, and post-quantum migration plans.
• Author platform TARA, cybersecurity concepts, cybersecurity cases, and evidence required for UNECE R155/R156 and ISO 24089 processes.
• Review boot and update-client implementations at code level, adjudicate penetration tests, gate releases, and lead vulnerability response and supplier security requirements.

Requirements

• 15+ years of embedded or firmware engineering experience, including at least 6 years owning embedded or product security.
• Production ownership of a secure-boot or chain-of-trust design on MCU-class silicon using bare-metal or an RTOS.
• Strong applied cryptography experience, including signature schemes, key hierarchies, HSM or secure-element programming, and manufacturing key provisioning.
• Hands-on experience with TUF, Uptane, or an equivalent signed-metadata update system with rollback protection.
• Authorship of a TARA, cybersecurity concept, or cybersecurity case, with working familiarity with UNECE R155/R156.
• Strong C skills for reviewing boot and update code, linker scripts, memory maps, and HSM API usage, plus the ability to write auditable technical requirements.

Nice to have

• Uptane, TUF, python-tuf, go-tuf, or IEEE-ISTO 6100 participation or contributions.
• ISO 26262 and ASIL-rated safety-security co-engineering experience.
• Experience with NXP S32K3, HSE_B, lockstep Cortex-M7, post-quantum signatures, or crypto-agility.
• Experience with SecOC, MACsec, DoIP, UDS, or secure in-vehicle middleware communication.
• Direct interaction with TÜV, exida, UL, or OEM security assessors.

Culture & Benefits

• Full-time engineering role focused on safety-first, user-centric software-defined vehicle technology.
• Opportunity to shape platform security architecture and release decisions across the vehicle product lifecycle.
• Equal opportunity employment with consideration for veterans and qualified individuals with disabilities.
• Resume documents must be submitted in PDF format and remain under 30 MB.

Hiring process

• Application review, coding test, first interview, second interview, offer negotiation, and hiring.
• Screening stages and schedules may vary by position and circumstances; results are provided by email.