Embedded Security Engineer (Remote)

About the role

As an Embedded Security Engineer you will design and implement core security mechanisms for connected hardware platforms. You will build a hardware root of trust and secure boot chain, harden storage, and integrate trusted execution environments to protect the deepest layers of embedded systems.

Key responsibilities

• Architect and implement Secure Boot from bootloader through kernel, creating a hardware root of trust from scratch.
• Harden storage using dm-verity and dm-crypt.
• Deploy a Trusted Execution Environment (TEE) and author trusted applications (e.g., OP‑TEE).
• Enforce user‑space sandboxing and access‑control mechanisms.
• Automate cryptographic signing pipelines within CI/CD workflows.

Required profile

• 5+ years of embedded systems engineering with a security focus.
• Deep knowledge of embedded Linux security (dm-verity, dm-crypt, ARM TrustZone EL1‑EL3).
• Proven experience designing hardware root of trust and Secure Boot, including U‑Boot Verified Boot.
• Experience with board bring‑up, BSP customization, and Yocto.
• Background in TEE development and OP‑TEE trusted app authoring.
• Strong C programming skills and proficiency in Python or Bash scripting.
• Advanced proficiency in English.

Required skills

• Secure Boot
• Hardware root of trust
• dm-verity
• dm-crypt
• ARM TrustZone
• U‑Boot
• Yocto
• OP‑TEE
• C
• Python
• Bash
• CI/CD pipelines
• Cryptographic signing
• Embedded Linux
• Board bring‑up
• BSP customization

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacations, and national holidays.
• Multicultural environment with top‑tier global talent.
• Mentorship, promotion pathways, and continuous skill development.