Android Security Engineer (CoreOS: BSP/Security)

Pi Square Technologies; Bengaluru; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

Pi Square Technologies is seeking an experienced Android Security Engineer with 5+ years of hands-on work in securing Android platforms and embedded systems. You will design and implement security features across the Android stack, from secure boot to application-level protections, collaborating with hardware, firmware, and software teams.

The role requires strong C/C++ skills, experience with AVB, TrustZone, FBE, and hardware security integrations.

Qualifications

• 5+ years hands-on Android/embedded security engineering.
• Strong C/C++ for low-level systems and firmware development.
• Experience with secure boot, secure fusing, and AVB.
• Knowledge of ARM TrustZone, QSEE/TEE.
• Experience with Qualcomm/MediaTek chipsets.
• Cryptography fundamentals (AES, RSA, ECC).
• Proficiency in debugging tools (JTAG/UART/logcat).

Responsibilities

• Lead secure boot bring-up activities including secure fusing and AVB integration.
• Support and maintain File-Based Encryption (FBE) and full-disk encryption on Android.
• Develop and integrate TrustZone-based applications (Trusted Apps) within TEE.
• Work on secure firmware, bootloader, and trusted OS development.
• Collaborate with silicon partners on platform security enablement and issue resolution.
• Debug complex hardware/software integration issues related to security subsystems.
• Implement and validate cryptographic protocols and key provisioning/management schemes.

Skills

Android security

C/C++

secure boot

AVB

ARM TrustZone

cryptography

debugging

Tools

JTAG

UART

logcat

crash dumps

GDB

Android Debug Tools

OpenSSL

Job description

About the Role

We are seeking a skilled Android Security Engineerwith 5+years of experience to join our team. In this role, you will be responsible for designing, implementing, and maintaining platform security solutions across the Android software stack from secure boot and firmware through to application-level security features. You will work closely with hardware, firmware, and software teams to ensure our products meet the highest security standards.

Responsibilities

• Lead secure boot bring-up activities including secure fusing, hardware root-of-trust establishment, and Android Verified Boot (AVB) integration
• Support and maintain File-Based Encryption (FBE) and full-disk encryption solutions on Android platforms
• Develop and integrate TrustZone-based applications (Trusted Apps / TAs) within Trusted Execution Environments (TEE)
• Work on secure firmware, bootloader (ABL/XBL/LK), and trusted OS development
• Collaborate with silicon partners (Qualcomm / MediaTek) on platform security enablement and issue resolution
• Debug complex hardware/software integration issues related to security subsystems
• Implement and validate cryptographic protocols and key provisioning/management schemes

Required Qualifications

• 5+ yearsof hands-on experience in Android platform security or embedded security engineering
• Strong proficiency in C/C++for low-level systems and firmware development
• Demonstrated experience with secure boot, secure fusing, and Android Verified Boot (AVB)
• Hands‑on experience with File‑Based Encryption (FBE)implementation and debugging
• Working knowledge of ARM TrustZonearchitecture, TEE OS (QSEE/TEE-based), and Trusted Application development
• Experience with Qualcommand/or MediaTekchipset platforms (XBL, ABL, TZ-based security)
• Solid understanding of cryptographic fundamentals(AES, RSA, ECC, SHA, HMAC, key derivation, certificate chains
• Proficiency in debugging tools (JTAG, UART, logcat, crash dumps) and hardware/software integration troubleshooting

Preferred Qualifications

• Experience with secure provisioningand factory security flows on embedded/mobile platforms
• Familiarity with Android Keystore/Keymaster, StrongBox, and hardware-backed attestation
• Exposure to dm-verity, vbmeta, and partition integrity verification mechanisms
• Knowledge of secure OTA update mechanisms and anti-rollback protections
  

Technical Skills

Languages: C, C++, Assembly (ARM), Python/Shell (scripting)

Platforms: Qualcomm (QSEE, XBL, SCM), MediaTek (TEE, secure boot)

Security: AVB, FBE, TrustZone, TEE, Secure Boot, Fusing, Key Provisioning

Tools: JTAG, UART, GDB, Android Debug Tools, OpenSSL

Concepts: Cryptography, Secure Storage, Attestation, DRM