Lead Product Security Engineer - Embedded Linux

L4B Software; Pune District; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

L4B Software is seeking a senior, hands‑on Product Security Engineer with strong Embedded Linux experience. You will work directly with software and platform engineers to build security into the product lifecycle.

Responsibilities include threat modelling, security reviews, vulnerability management and alignment with standards such as IEC 62443 to deliver secure, compliant solutions. Collaboration across validation and QA teams is essential.

Qualifications

• Experience with Embedded Linux platforms
• Hands-on Linux engineering with Yocto/BitBake
• Product or embedded security engineering, including threat modelling and vulnerability management
• Strong understanding of Linux kernel and user-space security concepts
• Proficiency in C/C++ and source-level debugging
• Experience applying IEC 62443 or similar product cybersecurity standard
• Ability to translate security requirements into engineering actions and tests
• Experience with secure development practices, security reviews, and cross-functional collaboration

Responsibilities

• Define and review product-security requirements for Embedded Linux-based platforms.
• Perform threat modelling, attack-surface analysis and security architecture reviews.
• Work with engineering teams on secure design, implementation and remediation.
• Assess Linux kernel and user-space configurations from a security perspective.
• Support vulnerability analysis, CVE triage, remediation, verification, SCA and SBOM activities.
• Contribute to secure boot, platform hardening, access-control and system-integrity activities.
• Contribute to secure software-development lifecycle activities and security reviews.
• Translate applicable cybersecurity standards into practical engineering requirements and verification criteria.

Skills

Embedded Linux

Yocto Project

Threat Modelling

Vulnerability Management

Linux Kernel Security

C/C++

IEC 62443

Security Requirements to Tests

Job description

About L4B Software

L4B Software develops secure, reliable operating-system platforms for embedded, regulated and mission-critical products. Our teams work close to the operating system and hardware, where security, reliability and long-term maintainability matter.

About the role

We are looking for a senior, hands‑on Product Security Engineer with strong Embedded Linux experience. The role combines technical security engineering, product‑security architecture and practical understanding of cybersecurity standards. You will work directly with software and platform engineers to build security into the product lifecycle.

What you will do

• Define and review product-security requirements for Embedded Linux‑based platforms.
• Perform threat modelling, attack‑surface analysis and security architecture reviews.
• Work with engineering teams on secure design, implementation and remediation.
• Assess Linux kernel and user‑space configurations from a security perspective.
• Support vulnerability analysis, CVE triage, remediation, verification, SCA and SBOM activities.
• Contribute to secure boot, platform hardening, access‑control and system‑integrity activities.
• Contribute to secure software‑development lifecycle activities and security reviews.
• Translate applicable cybersecurity standards into practical engineering requirements and verification criteria, working closely with software, systems, validation and quality teams.

What you bring

• Strong professional experience with Embedded Linux products or platforms.
• Hands‑on Linux engineering capability, ideally including Yocto Project and BitBake.
• Product‑security or embedded‑security engineering experience, including threat modelling and vulnerability management.
• Good understanding of Linux kernel and user‑space security concepts.
• Strong C/C++ understanding and ability to investigate issues at source‑code level.
• Experience applying IEC 62443 or a comparable product‑cybersecurity standard in product development.
• Ability to turn security requirements and standards into engineering actions, tests and evidence.
• Experience with secure development practices, security reviews and cross‑functional engineering collaboration.

Nice to have

• Linux kernel hardening, SELinux, AppArmor or other Linux Security Modules.
• Secure boot, U‑Boot, UEFI/EDK2, TPM, TEE or hardware root‑of‑trust experience.
• SBOM, SCA, static‑analysis, fuzzing or penetration‑testing experience.
• IEC 81001-5-1, IEC 62304 or other regulated‑product cybersecurity experience.
• BSP, Device Tree, low‑level platform or Android/AOSP platform‑security experience.
• Experience with safety‑critical, regulated or long‑lifecycle products.