Embedded Security Developer

McNally Recruitment Ltd; Cumbernauld; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A UK recruitment firm is seeking an Embedded Security Developer to ensure secure design and implementation of firmware and software. Ideal candidates will have over 5 years of experience in embedded systems and strong C/C++ skills. The role is hybrid, requiring 4 days in the Scottish office, and emphasizes secure coding practices and compliance with industry standards. Applicants must be authorized to work in the UK.

Qualifications

• Minimum 5 years of experience in developing embedded firmware.
• Strong understanding of common vulnerabilities including OWASP Top 10.
• Experience implementing DevSecOps best practices.

Responsibilities

• Perform security requirements analysis.
• Conduct risk analysis and threat modelling.
• Ensure secure design principles are applied.

Skills

C/C++ programming skills

Understanding of encryption algorithms

Strong understanding of common vulnerabilities

Self-directed and motivated

Education

Engineering degree in Software, Computer Science, or Cybersecurity

Tools

Azure DevOps

Job description

The Embedded Security Developer will be responsible for ensuring the secure design and implementation of embedded firmware and software components within our product portfolio. This role involves applying secure coding practices, performing threat modeling, and ensuring compliance with industry standards and internal processes. The ideal candidate will have a strong background in embedded systems development and a passion for cybersecurity.

PLEASENOTE the client will only accept candidates who are authorised to work in the UK, without the requirement for sponsorship or any type of visa (e.g. dependant/spousal, post-study etc.).

In addition, this role hybrid based with 4 days in the Scottish office, therefore you should currently be located in Scotland.

PRINCIPLE JOB RESPONSIBILITIES

• Perform security requirements analysis
• Conduct risk analysis and threat modelling
• Ensure secure design principles are applied such as least privilege, defence in depth, and secure defaults

• Ensure secure implementation of requirements and threat mitigations, including:

  • Follow secure coding guidelines to prevent common vulnerabilities (e.g., buffer overflows, injection flaws)
  • Application of Static Code Analysis to identify security vulnerabilities in code
  • Application of Software Composition Analysis to ensure supply chain security
  • Unit testing and code reviews
• Defect analysis and remediation
• Ensure compliance with internal processes and applicable standards (e.g., IEC 62443, ISO 27001)
• Support internal and external audits as required
• Drive continuous improvement by staying updated on emerging threats, tools, and best practices
• Occasional travel may be required, such as training or customer support.

REQUIRED QUALIFICATIONS AND EXPERIENCE

• Minimum 5 years of experience in developing embedded firmware
• Engineering degree in Software, Computer Science, Cybersecurity or equivalent demonstrated knowledge.
• Strong C/C++ programming skills
• Understanding of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.)
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25)
• Familiarity with Linux, Windows, RTOS and network protocols (TCP/IP, DNS, HTTP/S)
• Understanding of industrial protocols (e.g., Serial, Modbus, HART)
• Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASP
• Experience implementing DevSecOps best practices; Azure DevOps experience is a plus
• Self‑directed and motivated in a team orientated environment