Embedded Security Engineer - Device Hardware | Verkada NEW

The Briefed; San Mateo (CA); On-site; USD 130,000 - 280,000; Full time

Benefits offered by this job

RSUs

Healthcare and wellness

Parental & family care

Onsite meals

Commuter benefits

Professional development stipends

Flexible PTO

Job summary

Verkada seeks an Embedded Security Engineer on the Device Security Team to protect its fleet of physical security products. You will shape security roadmaps for hardware and firmware, build automated tooling, and collaborate with product teams to embed secure-by-design principles across development.

You will perform red team assessments, drive threat modeling and design reviews, and partner with security leadership to advance the overall security posture and resilience of Verkada’s devices.

Qualifications

• 8+ years of professional security engineering experience.
• Strong Linux kernel security and networking knowledge.
• Experience with hardware security mechanisms (secure boot, TrustZone, disk encryption, MAC).
• Applied cryptography knowledge and key management.

Responsibilities

• Define security requirements for device hardware and firmware architectures.
• Partner with cross-functional teams to embed secure-by-design principles throughout the product lifecycle.
• Develop threat models and participate in design reviews for embedded device components.
• Implement and evaluate hardware security features such as secure boot pipelines and TrustZone.
• Perform red team assessments and develop security tooling to automate analysis.
• Triage, validate, and remediate vulnerabilities from internal tooling, audits, and bug bounty programs.

Skills

Linux internals

Networking

Threat modeling

Applied cryptography

Communication

Education

Bachelor of Science in Computer Science/Engineering

Tools

TrustZone

Secure boot

Disk encryption

MAC (Mandatory Access Control)

Job description

As an Embedded Security Engineer on the Device Security Team, you will work closely with security, firmware, and backend engineers entrusted with the core mission of protecting Verkada's entire fleet of physical security products. You will shape the security and privacy roadmap for hardware and firmware, build automated security tooling, perform red team offensive assessments, and partner with product teams to embed secure-by-design principles into current and next-generation devices.

Key Responsibilities

Hardware & Firmware Security Architecture

• Hardware & Firmware Requirements: Define and execute security requirements for device hardware and firmware architectures to improve product security postures.
• Secure-by-Design Partnership: Partner with cross-functional product teams to embed secure-by-design and secure-by-default principles throughout the product development lifecycle.
• Threat Modeling & Design Reviews: Develop threat models, construct attack trees, and participate in security design and code reviews for embedded device components.
• Hardware Security Features: Implement and evaluate hardware-level security mechanisms, including secure boot pipelines, ARM TrustZone, disk encryption, and mandatory access controls (MAC).

Offensive Testing, Tooling & Vulnerability Management

• Red Teaming & Offensive Assessments: Perform hands-on red team assessments, reverse engineering, and offensive security reviews against device hardware and firmware.
• Security Tooling Development: Build custom security tooling to automate security analysis and enforce secure software development practices across engineering teams.
• Vulnerability Triage: Triage, validate, and remediate security vulnerabilities sourced from internal tooling, third-party audits, and bug bounty programs.
• Program Growth & Advocacy: Collaborate with the CISO and security leadership to expand the overall security posture, presenting insights through technical blogs and security conferences.

Requirements

Technical Depth & Security Engineering Foundations

• Education: Bachelor of Science in Computer Science, Computer Engineering, or an equivalent technical field.
• Experience Track: 8+ years of professional experience in security engineering, software engineering, or security consulting.
• Linux Internals & Networking: Deep operational knowledge of Linux-based operating system internals, kernel security, and network protocols.
• Hardware Security Mechanisms: Practical experience with hardware security primitives—such as secure boot, TrustZone, disk encryption, or mandatory access control.
• Applied Cryptography: Working knowledge of cryptographic primitives, key management protocols, and practical security applications.
• Attacker Tactics & Mitigations: Thorough familiarity with common hardware/firmware security weaknesses, exploit vectors, attack chains, and defensive mitigations.
• Communication & Collaboration: Excellent written and verbal communication skills with a track record of driving security enablement across cross-functional engineering teams.

Preferred Qualifications

• Experience evaluating or implementing security features on embedded microcontrollers (MCUs) or system-on-chip (SoC) architectures.
• Background in hardware reverse engineering, side-channel analysis, or physical fault injection testing.
• Active contributions to open-source embedded security tools or published security research.

Total Rewards & Benefits

• Compensation & Equity: Estimated annual pay range ($130,000 – $280,000 USD) + Restricted Stock Units (RSUs) + sales incentives/discretionary bonuses.
• Healthcare & Wellness: Comprehensive medical, vision, and dental insurance (100% employer-covered premiums for employees and 80% for family under select plans), HSA with employer contributions, and expanded mental health support.
• Parental & Family Care: Paid parental leave policy alongside comprehensive fertility benefits and fertility stipends.
• Onsite Perks & Travel: Healthy lunches provided daily in office, commuter benefits, and professional development stipends.
• Time Off: Flexible PTO, personal sick time, paid company holidays, and firmwide extended holidays.