Senior Firmware Engineer

Fluke Corporation; Bengaluru; On-site; USD 6,816 - 11,360; Full time

Job summary

An established industry player is seeking a Firmware Security Analyst to enhance their product development lifecycle with robust security practices. This role involves collaborating with global teams to integrate security measures from the outset, automating security testing, and participating in incident response efforts. The ideal candidate will have a solid understanding of firmware development processes and SDL principles, along with experience in automated security tools. Join a forward-thinking company where your expertise can significantly impact product security and compliance, while working in a dynamic and supportive environment that fosters innovation and growth.

Qualifications

• Strong understanding of firmware development and secure development lifecycle principles.
• Experience with automated security scanning tools for firmware.

Responsibilities

• Ensure firmware development aligns with SDL policies and embed security best practices.
• Automate security scans and collaborate with DevOps to identify vulnerabilities.

Skills

Firmware Development Processes

Secure Development Lifecycle (SDL)

Automated Security Scanning Tools

DevOps Practices

Cross-Functional Collaboration

Effective Communication

Incident Response Participation

Education

B.S. Degree in Cybersecurity

Industry Certifications (CEH, GSEC)

Tools

Binwalk

Firmware Analysis Toolkit

Static and Dynamic Analysis Tools

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from Fluke Corporation

Technical Recruiter at Fortive | HR Specialist | Talent Acquisition Specialist

Firmware Security Analyst

As a Firmware Security Analyst at Fluke, you will ensure that security is embedded into our product development lifecycle across all firmware projects. Working closely with global development and DevOps teams, you will enforce Fluke’s security development policies, ensuring that security is built into the firmware development process from the start. In this role, you’ll help automate security testing, establish and track security requirements, and work cross-functionally to prioritize remediation efforts. Additionally, you will play an essential role in incident response efforts, providing expertise on security incidents related to firmware.

The Firmware Security Analyst will report to Fluke’s CISO and work closely with the Product Security Lead. This role is based out of our Bangalore, India office.

Responsibilities:

1. SDL Policy Adherence: Ensure that all firmware development processes align with Fluke’s SDL (Security Development Lifecycle) policy, actively embedding security best practices throughout development.
2. Cross-Functional Security Collaboration: Partner with global development teams to integrate security as an inherent part of the product design, development, and testing process.
3. Automate Security Scans: Collaborate with DevOps to automate security scans and testing, ensuring that vulnerabilities are identified and addressed in a timely manner.
4. Establish Security Requirements: Define security requirements for firmware projects, helping development teams understand and implement required security measures.
5. Prioritize and Track Remediations: Work with development teams to prioritize vulnerability remediation based on risk, compliance needs, and product impact, and track resolution progress to ensure timely closure.
6. Incident Response Participation: Act as a critical member of the incident response team, providing firmware security expertise to investigate, contain, and resolve security incidents.
7. Compliance and Reporting: Track and report on compliance with the SDL, documenting adherence and improvements over time, and contribute to periodic security posture reports for management.

Qualifications and Experience:

Skills and Work Traits

1. Strong understanding of firmware development processes and secure development lifecycle (SDL) principles.
2. Experience with automated security scanning tools, particularly for firmware (e.g., Binwalk, Firmware Analysis Toolkit, static and dynamic analysis tools).
3. Familiarity with DevOps practices and tools used to integrate security testing into CI/CD pipelines.
4. Proven ability to work cross-functionally with global, remote teams and influence security adoption within development cycles.
5. Effective communication skills for conveying complex security requirements and collaborating across teams.
6. Detail-oriented with an analytical approach to prioritizing, managing, and remediating vulnerabilities.
7. Experience participating in incident response efforts, particularly in the context of firmware or embedded systems.

Education

1. B.S. Degree in Cybersecurity, Computer Engineering, or a related field, or equivalent work experience.
2. Industry certifications such as Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC), or working towards similar credentials (preferred).

This position is ideal for someone with a proactive approach to firmware security and experience in secure development practices, looking to make an impact within Fluke’s global product security framework.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Engineering and Information Technology

Industries

Appliances, Electrical, and Electronics Manufacturing