Product Security Analyst

Toradex; Campinas; Híbrido; BRL 144 000 - 216 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Meal allowance

Health and dental care

Parking space

Anniversary day off

Resumo da oferta

Toradex in Campinas, Brazil, is seeking a Product Security Analyst to implement, validate and maintain security features in our embedded software stack. You’ll work hands-on with bootloaders, Linux kernel security, secure updates, and vulnerability management.

We value collaboration across teams and offer hybrid work from the Campinas office. Ideal candidates have 3+ years in embedded security, strong C/C++, and experience automating security checks in CI/CD pipelines.

Qualificações

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or equivalent experience.
• Advanced communication skills in English, written and spoken.
• Available to work Hybrid from Toradex Office in Campinas/SP.
• 3+ years of experience in embedded systems security or adjacent areas (e.g. Linux security engineering).
• Solid C/C++ coding and debugging skills.
• Experience with automating security checks in CI/CD pipelines.
• Knowledge of threat modeling/risk modeling methodologies and how they relate to regulatory and standards compliance is a plus.
• Knowledge of security evaluation and analysis tools like fuzzers and static analysis tools is a plus.
• Hands-on experience with bootloaders (e.g., U-Boot), kernel security features, and embedded Linux distributions/build systems (Yocto/OpenEmbedded, Buildroot, etc.) is a plus.

Responsabilidades

• Security feature enablement: Bring up security features on new hardware and enable basic hardware security like secure boot, ARM TrustZone/OP-TEE.
• Vulnerability management: Monitor CVEs, assess impact, apply patches and mitigations, draft advisories.
• Security testing and automation: Automate test coverage of security features and use hardware-in-the-loop testing approaches.

Conhecimentos

C/C++ coding

Embedded systems security

CI/CD security automation

Threat modeling

Security testing

English communication

Formação académica

Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or equivalent experience

Ferramentas

U-Boot bootloader

Linux security features

Yocto/OpenEmbedded

Buildroot

Fuzzers / static analysis tools

CI/CD tooling

Descrição da oferta de emprego

Toradex is a global company strongly focused on engineering & technology. We’re powered by a diverse & uniquely gifted workforce. We pursue the best people to propel our innovative vision of embedded computing and IoT. If you’re interested in being a driving force at an agile technology company, engineering clever computing solutions & helping other companies bring their products to life, we should talk.

Overview

As a Product Security Analyst at Toradex, you’ll be responsible for the implementation, validation, and maintenance of security features in Toradex’s embedded software stack. That means hands‑on, low‑level work with bootloaders, Linux kernel security features, secure software updates and more.

We aim to make embedded software development easy and approachable, which means that our engineers have to go beyond just feature enablement. Your work will involve making the developer experience of working with low‑level security features as smooth as it possibly can be. You’ll work on systems used in critical industries like healthcare, industrial automation, and robotics.

Responsibilities

• Security feature enablement

Bring up security features on new hardware. Every new product we release, we strive to have a uniform, straightforward experience for enabling basic hardware security features like secure boot, ARM TrustZone/ OP-TEE , and hardware-backed encryption.

Toradex maintains Torizon OS, a secure, production‑ready embedded Linux OS. Making sure that security features fit into the whole stack, and that configurations are secure‑by‑default for the most common and supported workflows is a key part of the job. Understanding how everything fits together is a must.

• Vulnerability management

Monitor upstream CVEs, assess their impact on Toradex products and their likely impact on Toradex customers' products. Apply patches and mitigations. Help draft security advisories and write VEX documents. Work on and maintain internal tooling for vulnerability management.

• Security testing and automation

Automate test coverage of security features. Familiarity with LAVA or other hardware‑in‑the‑loop embedded testing methodologies and frameworks is a strong plus.

Note: You don’t necessarily need experience/expertise in all of these areas to apply, but some experience with at least two of these 4 areas would be a good indicator of fit.

Qualifications and Experience

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cybersecurity, or equivalent experience
• Advanced communication skills in English, written and spoken
• Available to work Hybrid from Toradex Office in Campinas/SP.
• 3+ years of experience in embedded systems security or adjacent areas (e.g. Linux security engineering)
• Solid C/C++ coding and debugging skills
• Experience with automating security checks in CI/CD pipelines
• Knowledge of threat modeling/risk modeling methodologies and how they relate to regulatory and standards compliance is a plus
• Knowledge of security evaluation and analysis tools like fuzzers and static analysis tools is a plus
• Hands‑on experience with bootloaders (e.g., U‑Boot), kernel security features, and embedded Linux distributions/build systems (Yocto/OpenEmbedded, buildroot, etc.) is a plus

What we offer

• Agile, globally oriented and intercultural corporate culture.
• Work on the latest hardware technology with early access to major SoC vendor
• Enjoy a flat hierarchy where you may truly shape our hardware and software offerings
• Count on a diverse team of experienced hardware and software engineers
• Variety of knowledge sharing, training and self‑development opportunities
• The opportunity to play a key role in shaping your own work processes and your work environment.
• Contemporary employment conditions, modern office space and a flexible working environment.
• Opportunities for your personal development.
• Meal allowance (flash card)
• Health and dental care
• Parking space
• Anniversary day off

Disclaimer: This is not a temporary role. It is a long‑term, full‑time opportunity.

Toradex is a leader in embedded computing, serving innovative products to industrial, medical, automotive & IoT companies creating feature‑rich & intelligent systems for demanding applications, e.g. supercars, self‑driving tractors, patient monitoring systems - to name a few.

We provide effective & robust embedded computing solutions and strive for the best development experience in the industry with a focus on intelligent hardware design, innovative software solutions & free comprehensive support. Our relationship with our customers ensures that we all succeed and it allows us to participate in the realization of incredible new products. Our products are directly sold to more than 3'000 industrial customers in over 70 different countries worldwide.