Hardware Security Engineer

Sine Engineering; Tampere; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Lunch benefit

Wellbeing allowance

Extended occupational healthcare

Accident insurance (24/7)

Travel insurance

Snacks & office comforts

Job summary

Sine Engineering in Tampere, Finland, is seeking a Hardware Security Engineer to own the security posture of embedded hardware and firmware products. You’ll model threats, assess devices, and shape secure architecture patterns across the development lifecycle.

The role focuses on secure boot, hardware root of trust, encrypted storage, key management, and evaluation of security ICs. You’ll work with RF/protocol security and enable the R&D team with security best practices.

Qualifications

• 5+ years in hardware, embedded, or product security engineering.
• Hands-on JTAG/UART/SWD exploitation and fault injection.
• Firmware extraction and reverse engineering with Ghidra/IDA/Binwalk.
• AES, ECC, secure storage, TLS/DTLS for embedded systems.

Responsibilities

• Perform hands-on security testing of devices including JTAG/UART/SWD.
• Identify attack surfaces across RF interfaces and ports.
• Define hardware security architecture: secure boot, hardware root of trust, encrypted storage, key management.
• Train RnD engineers and integrate security checkpoints into EVT, DVT, and PVT gates.

Skills

JTAG/UART/SWD testing

Firmware reverse engineering

Embedded security

Threat modeling

AES ECC cryptography

Security architecture

Ghidra/IDA/Binwalk

Tools

Ghidra

IDA Pro

Binwalk

Job description

Location: Tampere, on‑site, full‑time, permanent position

Sine Engineering is the leading global company developing advanced radio communication and navigation systems. We are building mission-critical infrastructure for the multi-million drone era.

Here, you will work with cutting‑edge technologies tested in the most challenging environments in the world, and watch your ideas evolve into an ecosystem that safeguards humanity.

About the Role

The Hardware Security Engineer owns the security posture of our embedded hardware and firmware products: from threat modeling during design, through hands‑on device assessment, to defining secure architecture patterns the team builds against. This includes the definition and evolution of cybersecurity processes in our product development life cycle.

What You’ll Do

Hardware Security Assessment

• Perform hands‑on security testing of our devices: JTAG/UART/SWD exploitation, firmware extraction, fault injection, side‑channel analysis
• Identify and document attack surfaces across RF interfaces, debug ports, physical access vectors, supply chain, etc.
• Conduct threat modeling (STRIDE or equivalent) at the start of each product cycle
• Produce risk‑rated findings with clear, actionable remediation steps

Secure Architecture & Requirements

• Define hardware security architecture for new products (and threat assessments for existing products): secure boot, hardware root of trust, encrypted storage, key management
• Evaluate and select security ICs — secure elements (ATECC608, SE050), TPMs, HSMs and more
• Work with design teams, giving guidance and recommendations

RF & Protocol Security

• Assess wireless interfaces against jamming, spoofing, replay, and protocol‑level attacks
• Define encryption, authentication, and anti‑replay requirements for datalink and SDR‑based systems

Secure Development & Team Enablement

• Integrate security checkpoints into EVT, DVT, and PVT gates
• Conduct security‑focused code and design reviews
• Train RnD engineers on hardware security fundamentals

Key Requirements

• 5+ years in hardware security, embedded security, or product security engineering
• Hands‑on experience with JTAG/UART/SWD exploitation, fault injection, and side‑channel analysis
• Firmware extraction and reverse engineering (Ghidra, IDA Pro, Binwalk, or equivalent)
• Practical knowledge of AES, ECC, secure key storage, TLS/DTLS applied to resource‑constrained embedded systems

Nice to Have

• SDR‑based attacks, signal analysis, protocol reverse engineering
• Experience assessing datalink or UAV communication systems
• Hands‑on integration of secure elements: ATECC608, SE050, or equivalent TPM/HSM
• Familiarity with IEC 62443, NIST SP 800‑193, PSA Certified, or FIPS 140‑2/3

What We Offer

Paid Time Off:

the Employee is entitled to an annual holiday 4 + 1 weeks

Health & Wellness Package:

• Lunch Benefit: daily lunch allowance up to the tax‑free limit as a fringe benefit.
• Sport & Culture: annual budget for gyms, sports activities, cultural events, and hobbies.
• Wellbeing Allowance: additional allowance for massage, mental health services, and other wellness support.
• Extended Occupational Healthcare: enhanced coverage including GP, specialists, mental health, and partial dental care.
• Accident Insurance (24/7): full coverage for accidents during both work and free time.
• Business Travel Insurance: coverage for work‑related travel.
• Snacks & Office Comforts: coffee, snacks, fruits, and other office perks.

Work Model:

• Flexible Working Hours: core hours from 10:00 to 15:00.
• No‑Crunch Policy: no systematic overtime; overtime is compensated or reimbursed.
• Meeting‑Light Culture: protected focus time and minimal unnecessary meetings.

Growth & Innovation:

• High‑End Equipment: premium laptop, monitor, and peripherals.
• Lab & Gadget Budget: annual budget for hardware, tools, books, and learning materials.
• Hackathons & Offsites: regular internal events focused on innovation and technology.

Travel & Mobility:

• Business Travel Expenses: full coverage of tickets, accommodation, and transportation.
• Per Diem (Vero Max): daily allowances according to the maximum tax‑free Vero rates.

Impact & Culture:

• Low‑hierarchy, engineering‑driven environment with strong autonomy and zero micromanagement.

Privacy Notice

By applying for this position, you consent to the processing of your personal data for recruitment purposes.

Your data will be handled in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Act on the Protection of Privacy in Working Life. We will retain your application data for up to 6 months, unless you consent to a longer retention period.

You may request access, correction, or deletion of your data at any time by contacting: [e-mail]