Embedded Security Engineer

Northern Recruitment Group; Newcastle upon Tyne; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

26 days annual leave + bank holidays

Employer pension contribution 10%

Annual bonus ≈5%

Subsidised healthcare

Salary sacrifice benefits

Job summary

Northern Recruitment Group is seeking an experienced Embedded Security Expert for a hybrid role in the North East, based in South Tyneside. You will join an established engineering team delivering secure embedded products for critical infrastructure in energy and power.

The role blends hands-on C/C++ development with product security, secure architecture, and cybersecurity integration into firmware. You will model threats, assess risks, perform security testing, and drive secure development

Qualifications

• Strong embedded software experience in C/C++.
• Experience with ARM, RTOS, bootloaders.
• Hands-on cybersecurity controls in embedded products.
• Understanding of secure development and threat modelling.

Responsibilities

• Define and implement security requirements and features within embedded software and firmware.
• Develop secure embedded software using C/C++ and contribute to secure product architecture.
• Perform threat modelling, security risk assessments, vulnerability assessments and design reviews.
• Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements.
• Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team.

Skills

C/C++ embedded

Embedded systems

Secure development

Threat modelling

Security testing

Tools

ARM architectures

RTOS environments

Bootloaders

IEC 62443

Job description

Location: South Tyneside
Working Pattern: Hybrid, up to 2 days working from home
Employment Type: Permanent
Salary: Competitive + Bonus + Benefits

We are looking for an experienced Embedded Security Expert to join an established engineering team developing secure embedded products for critical infrastructure within the energy and power sector.

This is not a traditional IT or enterprise cybersecurity position. It is a hands-on embedded software security role, combining C/C++ engineering with product security, secure architecture and the implementation of cybersecurity requirements directly within embedded devices and firmware.

Working within a multidisciplinary engineering team, you will help ensure products are secure by design and meet evolving cybersecurity requirements.

Key Responsibilities

• Define and implement security requirements and features within embedded software and firmware

• Develop secure embedded software using C/C++ and contribute to secure product architecture

• Perform threat modelling, security risk assessments, vulnerability assessments and design reviews

• Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements

• Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team

Experience Required

• Strong commercial experience developing embedded software using C and/or C++

• Practical understanding of embedded systems including ARM architectures, RTOS environments and bootloaders

• Hands-on experience implementing cybersecurity controls within embedded products, devices or firmware

• Good understanding of secure software development, threat modelling, vulnerability assessment and security testing

• Experience working within a product development environment and translating security requirements into practical engineering solutions

Particularly Relevant Experience

• Secure Boot, secure firmware updates and secure device provisioning

• Cryptography including AES, RSA, ECC and TLS

• PKI, certificate management, secure key storage and key management

• Product security standards such as IEC 62443, IEC 62351 or the Cyber Resilience Act

• Security engineering within power systems, energy, industrial automation, control systems, IEDs or other critical infrastructure environments

You do not need experience across every technology or standard listed. The key requirement is a strong combination of embedded software engineering and practical product security, with the ability to turn cybersecurity requirements into secure, working embedded solutions.

The Team

You will join a collaborative engineering operation in South Tyneside as part of a multidisciplinary team developing long-lifecycle embedded products.

This is a hands-on environment where everyone is expected to contribute and take ownership. You will have the opportunity to become a key point of expertise for embedded security, working alongside software, hardware, systems and test engineers as security requirements continue to increase across the product portfolio.

The role is based in South Tynesidewith up to two days per week working from home. Flexible working hours are available to help accommodate commitments outside work.

Benefits

• 26 days' annual leave plus bank holidays, with the option to purchase an additional 5 days

• Employer pension contribution of up to 10%

• Annual company performance-related bonus of approximately 5%

• Subsidised healthcare

• Salary sacrifice benefits and flexible working hours

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.