Firmware Engineer (Cybersecurity)

Location: Pullman, Washington, United States; onsite at the SEL corporate office.

Salary: $89,000–$134,100 annually.

Company

hirify.global is a 100% employee-owned company developing engineering solutions for industrial controls and electric power systems.

What you will do

• Design, implement, and test embedded firmware systems with an emphasis on cybersecurity.
• Develop secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging.
• Apply secure coding, threat modeling, and security design reviews throughout the firmware development lifecycle.
• Perform static analysis, fuzzing, penetration testing, vulnerability analysis, and remediation.
• Collaborate with Hardware Engineers on secure elements, TPMs, hardware cryptographic accelerators, and debug-port protection.
• Maintain security requirements, designs, and test documentation; support cybersecurity compliance and mentor Associate Engineers and Technicians.

Requirements

• Typically 2+ years of experience in embedded systems firmware development.
• Real-time firmware design experience.
• Experience with C, C++, and assembly languages.
• Embedded Linux systems development using C, C++, Python, and other scripting languages.
• Working knowledge of embedded cybersecurity fundamentals, including applied cryptography, symmetric and asymmetric encryption, hashing, digital signatures, PKI, and TLS.
• Knowledge of secure boot, secure firmware updates, secure coding practices, memory-safety vulnerabilities, threat modeling, and risk assessment.
• Strong writing, documentation, and speaking skills.
• Ability to learn new skills, assume new responsibilities, and work cooperatively in a team environment.

Nice to have

• Experience with static analysis, fuzzing, and penetration testing tools.
• Experience with hardware security features such as secure elements, TPMs, TrustZone or equivalent, and hardware cryptographic engines.
• Experience with secure network protocols and role-based access control.
• Knowledge of NERC CIP, IEC 62443, IEEE 1686, and NIST cybersecurity standards.
• Security certifications such as CSSLP, GICSP, or similar.
• Knowledge of industrial controls, three-phase electric power systems, modern communications protocols, digital and analog circuitry, digital communications, and signal processing.
• Project management experience.

Culture & Benefits

• 100% employee-owned organization with an employer-funded ESOP and personal 401(k) options.
• Medical, prescription, dental, vision, life, and disability insurance.
• 10 paid holidays, annual vacation starting at 12 days, 9 paid sick days, and paid family and medical leave covering 90% of pay.
• STEM courses, apprenticeships, tuition assistance, and engineering development programs.
• Additional wellness, fertility, adoption, and flexible spending benefits.