Sorry, this listing is no longer accepting applications. Don’t worry, we have more awesome opportunities and internships for you.

Firmware Security Engineer

SourceDirect Talent

Firmware Security Engineer

San Francisco, CA
Full Time
Paid
  • Responsibilities

    Our client is a fast pace Silicon Valley-based startup with over $100 million in venture financing and is currently experiencing exceptional growth due to both industry growth and covid19. They are in the business of replacing obsolete equipment with technology that's smart, secure, and easy to manage in the cloud. They are now seeking to hire a Firmware Security Engineer to be part of the new exciting security team reporting into the CISO directly.

    You will:

    • Facilitate the security of the hardware and firmware that goes onto the devices we ship to our customers: cameras,  Access Control units, Security Card / BLE readers, and future devices we will soon be launching
    • Explore innovative solutions to enable Verkada business instead of “Security says No”
    • Partner closely with Product, Hardware, and Backend engineering to test and improve the security of Verkada's products and exceed customers' expectations
    • Set up security tooling to ensure secure coding best practices
    • Triage and recommend solutions for security bugs from tools, third party assessments and bug bounties
    • Participate in code reviews and pull requests
    • Collaborate with other engineering leaders to define, communicate, and execute on goals, priorities and process.
    • Collaborate with the CISO and security team to grow the broader security program
    • Share your security experience with other teams internally and externally via security conferences and blogs
    • Help your peer engineers grow their own security reasoning and knowledge

    Requirements:

    • Bachelor of Science in Computer Science degree or equivalent
    • Experience in embedded firmware environments
    • 5+ years of experience as a security engineer, software engineer, or security consultant
    • Understanding of security weaknesses, exploits, attacks and mitigations
    • Coding ability - you will be writing production code
    • Excellent collaborative skills
    • Outstanding written and verbal communication
    • Experience with most of the following: C/C+, Device Drivers, Kernel, Fuzzing, Network protocols, Static Analysis, OS hardening, Threat Modeling

    Nice to have:

    • Experience programming in Go and Python
    • Achieved FIPS 140-2 or FIPS 140-3 certification
    • Knowledge of FreeRTOS and Embedded Linux
    • Experience with TPMs and/ or SecureBoot
    • Cryptography primitives, protocols and applications

    Our client is an equal opportunity employer and values diversity. We and our client do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status, and encourage all qualified applicants to apply