Embedded Security Engineer

CyberNorth; South Tyneside; Hybrid; GBP 75,000 - 105,000; Full time

Benefits offered by this job

26 days’ annual leave + bank holidays,

Employer pension contribution up to 10

Annual company bonus ~5%

Subsidised healthcare

Salary sacrifice benefits

Job summary

NRG in South Tyneside is seeking an experienced Embedded Security Expert to join an established engineering team developing secure embedded products for critical infrastructure in the energy sector. This hands-on role blends C/C++ engineering with product security, secure architecture, and implementing cybersecurity requirements directly within embedded devices and firmware for secure-by-design products.

You will work in a hybrid setup (up to two days from home) with flexible hours, 26 days

Qualifications

• Experience in embedded software security within product development.
• Hands-on experience implementing cybersecurity controls within embedded products, devices or firmware.
• Ability to translate security requirements into practical engineering solutions.

Responsibilities

• Define and implement security requirements and features within embedded software and firmware.
• Develop secure embedded software using C/C++ and contribute to secure product architecture.
• Perform threat modelling, security risk assessments, vulnerability assessments and design reviews.
• Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements.
• Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team.

Skills

C/C++

Embedded systems

ARM architectures

RTOS

Secure software development

Threat modelling

Job description

Location: South Tyneside
Working Pattern: Hybrid, up to 2 days working from home
Employment Type: Permanent
Salary: Competitive + Bonus + Benefits

We are looking for an experienced Embedded Security Expert to join an established engineering team developing secure embedded products for critical infrastructure within the energy and power sector.

This is not a traditional IT or enterprise cybersecurity position. It is a hands‑on embedded software security role, combining C/C++ engineering with product security, secure architecture and the implementation of cybersecurity requirements directly within embedded devices and firmware.

Working within a multidisciplinary engineering team, you will help ensure products are secure by design and meet evolving cybersecurity requirements.

Key Responsibilities

• Define and implement security requirements and features within embedded software and firmware
• Develop secure embedded software using C/C++ and contribute to secure product architecture
• Perform threat modelling, security risk assessments, vulnerability assessments and design reviews
• Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements
• Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team

Experience Required

• Strong commercial experience developing embedded software using C and/or C++
• Practical understanding of embedded systems including ARM architectures, RTOS environments and bootloaders
• Hands‑on experience implementing cybersecurity controls within embedded products, devices or firmware
• Good understanding of secure software development, threat modelling, vulnerability assessment and security testing
• Experience working within a product development environment and translating security requirements into practical engineering solutions

Particularly Relevant Experience

• Secure Boot, secure firmware updates and secure device provisioning
• Cryptography including AES, RSA, ECC and TLS
• PKI, certificate management, secure key storage and key management
• Product security standards such as IEC 62443, IEC 62351 or the Cyber Resilience Act
• Security engineering within power systems, energy, industrial automation, control systems, IEDs or other critical infrastructure environments

You do not need experience across every technology or standard listed. The key requirement is a strong combination of embedded software engineering and practical product security, with the ability to turn cybersecurity requirements into secure, working embedded solutions.

The Team

You will join a collaborative engineering operation in South Tyneside as part of a multidisciplinary team developing long‑lifecycle embedded products.

This is a hands‑on environment where everyone is expected to contribute and take ownership. You will have the opportunity to become a key point of expertise for embedded security, working alongside software, hardware, systems and test engineers as security requirements continue to increase across the product portfolio.

The role is based in South Tyneside with up to two days per week working from home. Flexible working hours are available to help accommodate commitments outside work.

• 26 days’ annual leave plus bank holidays, with the option to purchase an additional 5 days
• Employer pension contribution of up to 10%
• Annual company performance‑related bonus of approximately 5%
• Subsidised healthcare
• Salary sacrifice benefits and flexible working hours

If you are an embedded software engineer with a strong interest or background in product cybersecurity and want to work on technology where security, reliability and resilience genuinely matter,

NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero‑tolerance policy for breaches of our Equality and Diversity policy.