Software Security Engineer

SIRO Clinpharm Pvt. Ltd.; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

SIRO Clinpharm Pvt. Ltd. in Hyderabad is seeking a Software Security Engineer with 5+ years of embedded security experience to drive hardware security integration across firmware layers. The role focuses on secure boot, TrustZone isolation, cryptography, and RoT provisioning, with responsibilities spanning validation and regression testing.

The candidate will collaborate with a Pod Lead to implement fixes, ensure lifecycle workflows, and maintain security test suites for firmware releases.

Qualifications

• Experience in embedded platform security engineering (secure boot, TrustZone/TEE, cryptography).
• Secure boot / verified boot chain-of-trust implementation.
• TrustZone architecture and isolation enforcement.
• Applied cryptography AES, TRNG, key management, HRoT/fusing.
• Security debugging across firmware and kernel layers.

Responsibilities

• Implement fixes for secure boot, TrustZone isolation, and crypto defects, under the Pod Lead's direction.
• Support Hardware Root of Trust key provisioning and certificate/lifecycle workflows.
• Execute validation of security subsystem updates against each firmware release.
• Maintain the security regression suite.

Skills

Embedded platform security

Secure boot

TrustZone/TEE

Cryptography AES/TRNG

HRoT/fusing

Certificate lifecycle workflows

Security debugging (firmware/kernel)

RoT provisioning

Debugging and threat modeling

Develop security fixes

Tools

OP-TEE/GlobalPlatform

FIPS 140-3/PSA Certified

Fuzzing/Static analysis tooling

HSM-backed signing infrastructure

Job description

Job Title: : Software Security Engineer

Work Location: Hyderabad

Experience Range: 5+ years

Job Description:

Key Responsibilities

• Implement fixes for secure boot, TrustZone isolation, and crypto (AES/TRNG) defects, under the Pod Lead's direction.
• Support Hardware Root of Trust key provisioning and certificate/lifecycle workflows.
• Execute validation of security subsystem updates against each firmware release.
• Maintain the security regression suite.

Must-Have Skills

• Experience embedded platform security engineering (secure boot, TrustZone/TEE, cryptography).
• Secure boot / verified boot chain-of-trust implementation.
• TrustZone architecture and isolation enforcement.
• Applied cryptography AES, TRNG, key management, HRoT/fusing.
• Security debugging across firmware and kernel layers.

Good-to-Have Skills

• GlobalPlatform TEE APIs / OP-TEE Trusted Application development.
• Security certification exposure (FIPS 140-3, PSA Certified, SESIP or similar).
• Fuzzing, static analysis and secure SDLC tooling.
• HSM-backed manufacturing signing infrastructure experience