Senior Software Engineer, Embedded Product Security

What you'll do

• Manage the signed boot chain including firmware, bootloaders, kernel images, and full-disk encryption across multiple hardware generations.
• Oversee signing key management using HSM-backed keys and separate development and production trust roots.
• Define and implement runtime hardening postures for network exposure, firewall policies, and physical interface lockdowns.
• Manage vulnerability tracking and patching strategies for the fielded fleet, especially for hardware reaching end-of-life.
• Translate security requirements into technical implementations while serving as the team's liaison to the internal product security organization.
• Support program-specific accreditation efforts and ensure compliance with security standards.

What we're looking for

• 4+ years of professional software engineering experience with a focus on Linux or embedded systems.
• Hands-on experience implementing secure boot chains including code signing, chain of trust, and UEFI Secure Boot.
• Practical cryptographic engineering skills in PKI, certificate hierarchies, HSM/PKCS#11-backed signing, and full-disk encryption.
• Strong knowledge of Linux internals, including patching, boot flow, kernel/initrd, systemd, and access control.
• Proficiency in C or Rust and ability to work fluently in shell.
• Experience in hardening and vulnerability management on real systems, including attack-surface reduction and CVE triage.
• Ability to communicate security decisions clearly to both engineering teams and program stakeholders.
• Must be a US person with an active or reactivatable Secret clearance.