Cybersecurity Engineer – (Hardware/Embedded security)

Envision Technology Solutions; Pittsburgh (Allegheny County); On-site; USD 110,000 - 150,000; Full time

Job summary

Envision Technology Solutions in Pittsburgh is seeking a Cybersecurity Engineer specializing in hardware and embedded security to lead threat modeling, security testing, and risk assessment for residential/industrial devices.

The role focuses on hardware roots of trust, secure boot, TPMs, TrustZone, HSMs, and cryptographic architectures, with hands-on scripting in Python/Java and OpenOCD for security validation. Onsite position with a strong focus on practical security testing.

Qualifications

• Minimum 4+ years of experience in threat modeling and hardware security testing.
• Strong understanding of hardware security technologies such as TrustZone, HSM, TPM, Secure Elements, and related security architectures.
• Knowledge of cybersecurity standards and protocols including IEC 62443, UL 2900, IEC 15118, SAE J21434, PKCS, Matter, OCPP, and EV charging security.
• Experience developing scripts and automation using tools such as OpenOCD and programming languages such as Python or Java.
• Strong understanding of networking fundamentals, network protocols, authentication, and identity management.
• Ability to analyze complex security concepts and apply them to embedded products and cybersecurity assessments.
• Bachelor's degree in Computer Security, Computer Science, Electrical Engineering, or a related field with a cybersecurity focus.

Responsibilities

• Perform hardware and embedded product threat modeling, identify hardware security requirements, and conduct penetration testing and risk assessments.
• Review security features and datasheets of chipsets used in residential and industrial embedded devices and recommend appropriate hardware platforms.
• Participate in architectural reviews involving Hardware Root of Trust, bootloaders, secure boot, certificate/key storage, and related security components.
• Set up security testing tools, perform hardware security assessments, and recommend mitigation strategies to product development teams.
• Automate hardware security testing processes, including secure boot and secure firmware upgrade validation.
• Develop tools, scripts, and automation frameworks to improve security testing efficiency and scalability.
• Support cybersecurity assessments, product reviews, and security validation activities.
• Manage laboratory environments and contribute to small-scale research and development projects

Skills

Threat Modeling

Hardware Security

TrustZone

HSM

TPM

Secure Elements

IEC 62443

UL 2900

PKCS

Matter

OCPP

Python

Java

Cryptography

Network Protocols

Identity Management

Education

Bachelor's degree in Computer Security, Computer Science, Electrical Engineering, or related field with a cybersecurity focus

Tools

OpenOCD

Python

Java

Job description

Title - Cybersecurity Engineer – (Hardware/Embedded security)

Required Experience - 4 to 8 years’ experience

Location - Pittsburgh Pennsylvania (only onsite)

Job Description:

Must have qualifications:

• Minimum 4+ years of experience in threat modeling and hardware security testing.


• Strong understanding of hardware security technologies such as TrustZone, HSM, TPM, Secure Elements, and related security architectures.


• Knowledge of cybersecurity standards and protocols including IEC 62443, UL 2900, IEC 15118, SAE J21434, PKCS, Matter, OCPP, and EV charging security.


• Experience developing scripts and automation using tools such as OpenOCD and programming languages such as Python or Java.


• Strong understanding of networking fundamentals, network protocols, authentication, and identity management.


• Ability to analyze complex security concepts and apply them to embedded products and cybersecurity assessments.


• Bachelor's degree in Computer Security, Computer Science, Electrical Engineering, or a related field with a cybersecurity focus.

Preferred Qualifications:

• Knowledge of hardware supplier risk assessment methodologies.


• Understanding of hardware attack techniques such as side-channel attacks and fault injection attacks.


• Strong knowledge of embedded systems security, computer security technologies, symmetric and asymmetric cryptography, PKI, X.509 certificates, and PKCS standards.


• Experience with AI and AI-based tools used in cybersecurity applications.


• Familiarity with secure firmware development, secure provisioning, and hardware security validation methodologies.

Skills & Keywords

Hardware Security, Embedded Security, Threat Modeling, Secure Boot, Hardware Root of Trust, TPM, HSM, TrustZone, Secure Elements, Penetration Testing, OpenOCD, Python, Java, Cryptography, PKI, X.509, IEC 62443, UL 2900, SAE J21434, IEC 15118, OCPP, Matter, Firmware Security, Side-Channel Analysis, Fault Injection, Cybersecurity Testing, Risk Assessment, Networking, Authentication, Identity Management.

Responsibilities:

• Perform hardware and embedded product threat modeling, identify hardware security requirements, and conduct penetration testing and risk assessments.


• Review security features and datasheets of chipsets used in residential and industrial embedded devices and recommend appropriate hardware platforms.


• Participate in architectural reviews involving Hardware Root of Trust, bootloaders, secure boot, certificate/key storage, and related security components.


• Set up security testing tools, perform hardware security assessments, and recommend mitigation strategies to product development teams.


• Automate hardware security testing processes, including secure boot and secure firmware upgrade validation.


• Develop tools, scripts, and automation frameworks to improve security testing efficiency and scalability.


• Support cybersecurity assessments, product reviews, and security validation activities.


• Manage laboratory environments and contribute to small-scale research and development projects