Firmware Security Certification Engineer (Cybersecurity)

Location: Vancouver, Washington, United States of America; on-site or hybrid work is required, and relocation is offered.

Salary: $105,050–$161,800 USD annually, with additional bonus and/or equity opportunities for United States of America candidates.

Company

hirify.global develops software and hardware products, including enterprise printing and multifunction devices.

What you will do

• Serve as a technical subject-matter expert for Common Criteria certification of Dune-based devices.
• Map Security Targets, Protection Profiles, security requirements, and assurance evidence to Dune firmware architecture and device behavior.
• Configure, build, deploy, and troubleshoot firmware in certification test environments.
• Develop automated tests, scripts, utilities, and repeatable workflows that generate objective certification evidence.
• Execute functional, security, negative, regression, interoperability, network protocol, and secure communications testing.
• Prepare technical artifacts and resolve issues with firmware, security, networking, engineering teams, and external evaluation laboratories.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
• Demonstrated experience developing, integrating, debugging, or validating Dune firmware or a closely related embedded device platform.
• Strong understanding of embedded firmware architecture, operating-system services, device configuration, logging, and diagnostics.
• Practical networking expertise with TCP/IP, IPv4/IPv6, DNS, DHCP, HTTP/HTTPS, TLS, SNMP, 802.1X, certificates, and network troubleshooting.
• Experience creating automated tests and scripts with Python, shell scripting, PowerShell, or comparable languages.
• Ability to analyze complex requirements, isolate and reproduce defects, and drive issues to closure across multiple teams.
• Experience with source control, defect tracking, build environments, test frameworks, and continuous integration workflows.
• Strong written and verbal communication skills for producing precise technical evidence and explaining issues to engineers, evaluators, and stakeholders.
• Ability to work on site or in a hybrid arrangement in Vancouver, as required by the team.

Nice to have

• Experience supporting a Common Criteria evaluation, including Security Target development, evaluation evidence, evaluator interactions, vulnerability analysis, or certification maintenance.
• Knowledge of Common Criteria concepts, Protection Profiles, assurance activities, and certification-lab workflows.
• Experience with enterprise printers, multifunction devices, embedded Linux, secure boot, cryptographic services, authentication, access control, audit logging, or secure update mechanisms.
• Familiarity with packet capture, network diagnostics, security testing tools, and API or protocol test automation.
• Experience developing test harnesses, managing test data, and integrating automated security tests into CI pipelines.
• Understanding of secure development lifecycle practices, threat modeling, vulnerability remediation, and security certification dependencies.

Culture & Benefits

• Full-time employment with health, dental, vision, disability, life insurance, employee assistance, and flexible spending benefits.
• Four to twelve weeks of fully paid parental leave based on tenure.
• Eleven paid holidays plus flexible paid vacation and sick leave.
• Additional bonus and/or equity opportunities may apply to United States of America candidates.