Senior Security Engineer, Firmware

TN United Kingdom; Cardiff; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is searching for a highly experienced Senior Security Engineer specializing in embedded Linux and system-on-a-chip development. This pivotal role involves designing innovative security solutions, conducting vulnerability research, and developing secure systems for embedded devices. The ideal candidate will possess extensive experience in software development, particularly with C/C++, and a solid understanding of cryptographic protocols. Join a dynamic team committed to delivering cutting-edge solutions and enjoy a comprehensive benefits package that supports work-life balance and personal well-being.

Benefits

Healthcare (medical, dental, vision)

Life insurance

Commuter benefits

Retirement options (401(k)/pension)

Mental health support

Financial wellness resources

Vacation time

Qualifications

• 10+ years of software development experience with a focus on embedded systems.
• In-depth understanding of Linux and open source development.

Responsibilities

• Develop secure systems for cryptographic key programming and secure boot.
• Conduct vulnerability research and perform static analysis on firmware.

Skills

Embedded Linux

C/C++/OOD

Cryptography protocols

Vulnerability management

Red Team experience

Threat modeling

Education

Bachelor’s degree in Computer Science

Tools

Cryptographic tooling

Static analysis tools

Job description

Social network you want to login/join with:

Senior Security Engineer, Firmware, Cardiff

Client: Roku

Location: Cardiff, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Reference: 89cde75204d9

Job Views: 34

Posted: 10.04.2025

Expiry Date: 25.05.2025

Job Description:

About the Role

We are seeking a highly experienced Senior Software Engineer with a strong background in embedded Linux and system-on-a-chip (SoC) development and integration. This is a senior role that requires a high level of visibility within the organization. The ideal candidate will have a proven track record of developing secure systems and components on embedded devices.

What you’ll be doing

• Develop new product solutions for cryptographic key programming, secure boot, and secure enclave
• Develop cross product security infrastructure solutions
• Design cryptographic tooling to support new product development teams
• Design and implement realistic offensive security tools and exercises to simulate device firmware attacks
• Evaluate hardware vendor solutions security implementations (secure boot, TEE, secure video path, attack surface)
• Conduct vulnerability research including development of realistic scenarios threat actors use to compromise the security of an embedded system
• Perform static analysis on firmware images for vulnerability management

We’re excited if you have

• 10+ years of relevant software development experience
• In-depth understanding of Linux, tools, libraries and open source development
• Extensive experience with C/C++/OOD and the ability to solve complex problems
• Proven track record of success with embedded system development projects
• Solid grasp of cryptography protocols and applications
• Red Team experience on embedded systems
• Development experience with first stage bootloaders and secure boot flow
• Experience working with Trusted Execution Environment and secure software best practices
• Understanding of various types of exploits, threat modeling, and attack surfaces
• Bachelor’s degree in Computer Science or equivalent engineering experience

The Roku Culture

Roku is committed to offering a diverse range of benefits as part of our compensation package to support our employees and their families. Our comprehensive benefits include global access to mental health and financial wellness support and resources. Local benefits include statutory and voluntary benefits which may include healthcare (medical, dental, and vision), life, accident, disability, commuter, and retirement options (401(k)/pension). Our employees can take time off work for vacation and other personal reasons to balance their evolving work and life needs. It's important to note that not every benefit is available in all locations or for every role. For details specific to your location, please consult with your recruiter.

We have a unique culture that we are proud of. We think of ourselves primarily as problem-solvers, which itself is a two-part idea. We come up with the solution, but the solution isn't real until it is built and delivered to the customer. That penchant for action gives us a pragmatic approach to innovation, one that has served us well since 2002.