Senior Embedded Security Engineer

Working address: Etown Building, 364 Cong Hoa street, Tan Binh Ward, Ho Chi Minh city, Vietnam

Full-time

Job Description

About the Role

We are looking for 10 Senior Embedded Security Engineers to design, implement, and validate end-to-end security solutions on modern embedded platforms.

This role is open to candidates from multiple domains, including Automotive, IoT, Mobile Devices, and Embedded Systems.

If you have hands-on experience securing Linux / Android-based systems, SoCs, or connected devices, and are interested in working on automotive-grade platforms such as Infotainment (IVI) and ADAS, we strongly encourage you to apply.

You will work on modern SoC platforms (e.g. Qualcomm, Renesas, TI, Marvell) running Android Automotive, Linux, QNX, or AUTOSAR-based systems, contributing to secure, scalable, and production-ready embedded solutions.

Main Responsibilities

1. Security Architecture & Engineering

• Design and implement end-to-end security features for embedded platforms, including: Secure Boot, Trusted Execution Environments (TEE), Secure storage, Secure update mechanisms, Secure communication, etc...
• Contribute to security architecture definition for embedded and connected systems.

2. Threat Modeling & Reviews

• Perform security architecture reviews and threat modeling for infotainment, ADAS, IoT, or connected device platforms.
• Identify risks, define mitigation strategies, and drive security improvements early in the development lifecycle.

3. Security Implementation & Hardening

• Implement security hardening for Linux / Android / QNX systems.
• Conduct secure code reviews and collaborate with development teams to address vulnerabilities.
• Support integration of access control and system hardening mechanisms (e.g. SELinux, AppArmor).

4. Testing & Validation

• Perform security testing and validation, including: Static and dynamic analysis, Fuzzing, Penetration testing
• Validate security features on real hardware and production-like environments.

5. Process & Compliance

• Develop and maintain security requirements and security engineering processes (SEP).
• Support compliance with relevant security standards and best practices.

Qualifications

Mandatory Qualifications

• Educational background: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cryptography, or a related technical field
• 7-15 years of overall experience, with at least 2-5 years of experience in embedded software development, system software, or security engineering (backgrounds from Automotive, IoT, Mobile Devices, Consumer Electronics are all welcome)
• Practical experience with Linux and/or Android platforms, particularly in BSP, middleware, system services, or other low-level system components.
• Solid understanding of cybersecurity fundamentals, including cryptography, secure communication protocols, secure coding practices, and security testing principles.
• Hands-on experience implementing or supporting embedded system security features, such as secure boot, system trust mechanisms, secure storage, secure update/OTA, and secure communication between components or devices.

Nice-to-Have (Any of the following will be a strong advantage, but are not mandatory)

• Good knowledge or hands-on experience in development with modern SoC architectures, such as: Qualcomm, Renesas (RCAR), TI, etc.
• Experience in QNX development
• Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.)
• Good knowledge or hands-on experience in following areas:
  • Secure Boot.
  • Hardware-back security such as Trustzone (Arm TrustZone, OP-TEE, etc.), HSM, etc.
  • Storage security (disk encryption, dm-verity, etc.).
  • Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec, etc.).
  • Access control & hardening (SELinux, AppArmor, etc.).
  • Signing tools (Android signing, secure boot signing, etc.).
  • Linux / Android / QNX security development/hardening.
  • Network security, firewall.
  • Security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.).