Embedded Security Expert (IoT)

TL;DR

Embedded Security Expert (IoT/C++): Designing and maintaining secure embedded software and firmware with an accent on vulnerability analysis and secure coding practices. Focus on threat modeling, implementing cryptographic standards, and identifying risks across multiple microcontroller platforms.

Location: Porto, Portugal

Company

hirify.global develops resilient embedded solutions with a focus on practical cyber security.

What you will do

• Design, develop, and maintain secure embedded software/firmware in C/C++ for ARM Cortex, MIPS, and RISC-V architectures.
• Conduct threat modeling, security risk assessments, and vulnerability analysis throughout the product lifecycle.
• Identify security vulnerabilities in design, code, and architecture of embedded solutions.
• Collaborate with development teams to implement secure coding practices and perform security code reviews.
• Stay updated on the latest security trends and exploits to implement actionable system improvements.
• Document security architecture and design decisions for internal and external stakeholders.

Requirements

• Degree in Computer Science or equivalent work experience.
• 5+ years of experience in embedded systems development.
• Expert proficiency in C/C++ and at least 1 year of experience in IoT/embedded security.
• Deep understanding of RTOS (FreeRTOS, Zephyr, ThreadX), bootloaders (U-Boot, MCUboot), and Embedded Linux booting.
• Experience with JTAG/SWD debugging, logic analyzers, oscilloscopes, and board schematics.
• Fluent English (C1) for articulating complex security concepts.
• Strong knowledge of symmetric/asymmetric cryptography, PKI, and key management.

Nice to have

• Experience with hardware prototyping, soldering, and wireless networks (Zigbee, Wi-Fi, Bluetooth, Z-Wave).
• Knowledge of Secure Boot, Trusted Execution Environment (TEE), and Trusted Platform Modules (TPM).
• Experience with reverse engineering tools like IDA Pro, Ghidra, Radare2, or Binary Ninja.
• Proficiency in Python or other scripting languages.
• Experience with Unix-like systems administration and cyber-security frameworks.

Culture & Benefits

• Competitive salary and annual performance-based bonus.
• Employer-sponsored health insurance and a flexible benefits package.
• Extra holidays and trusted sick leave (up to 10 paid days per year).
• Flexible schedule and a strong emphasis on work-life balance.
• Accelerated career growth opportunities within the company.