Firmware Engineer, Secure Systems

Sweep360 Inc.; New York (NY); On-site; USD 132,000 - 220,000; Full time

Benefits offered by this job

Equity

Premium insurance

401(k)

Flexible PTO

Job summary

Sweep360 Inc. seeks a Firmware Engineer to own firmware across RTOS, embedded Linux, wireless radios, GPS, and custom hardware, delivering reliable code that works outside the lab and survives real-world conditions.

You will collaborate with the hardware lead, RF and ML teams, perform adversarial reviews, and implement secure boot and OTA updates to tighten the trust boundary between hardware and software.

Qualifications

• 3–6 years writing systems-level firmware for embedded targets with real depth, not glue code on top of HALs.
• Strong command of C with the ability to adopt new systems languages (Rust, Zig, C++) when appropriate.
• Proven background in red teaming, offensive security research, or adversarial testing targeting embedded systems and physical hardware.
• Reasons about trust boundaries, failure modes, and adversarial inputs before they become vulnerabilities.
• Thrived in an early-stage startup.
• Comfortable operating without perfect specs or complete information.
• U.S. Person status required (may involve export-controlled data).

Responsibilities

• Own firmware across RTOS, embedded Linux, wireless radios, GPS, and custom embedded hardware.
• Write and maintain system daemons and firmware modules with strict fault isolation
• Own secure boot and verified firmware update pipelines end-to-end
• Conduct adversarial review of firmware attack surfaces (e.g. USB, BLE, UART, OTA) and close what you find
• Partner with RF and ML teams on high-throughput signal capture and real-time processing pipelines.
• Build and maintain hardware validation tooling; reduce bring-up friction on every successive board spin.

Skills

Systems-level firmware

C programming

Red teaming / adversarial testing

Rust / Zig / C++

Security mindset

Tools

RTOS

Embedded Linux

Rootfs / systemd

Job description

TL;DR – We’re building humanity’s defense layer for the AI age and are looking for a Firmware Engineer to build systems that operate in real environments and survive contact with reality.

If you would have joined Nest before connected devices became commonplace—or Figure AI before humanoids left the lab—to build the firmware that made them trustworthy, this is that role.

Why Sweep?

As intelligent machines proliferate into every part of the physical world, we humans still lack a defense layer to ensure the systems and devices we rely on remain aligned with us.

We’re building that layer today by deploying alongside the world’s highest-stakes teams — Olympic delegations, F1 paddocks, halftime shows, global tours, studio productions, senior government officials, and executive protection units. What we learn there becomes the foundation for a civilization-defining capability.

We’re a small, talent-dense team with high ownership, high velocity, and low ego. We care deeply, move fast, and are here to build something that outlasts us.

What makes this role special?

• One of the first 10 engineers shaping hardware systems pre-Series A.
• Own firmware that leaves the lab and operates in some of the world’s highest-stakes environments.
• Work directly with the hardware lead across EE, firmware, and embedded systems.
• Operate in environments where hardware decisions have immediate consequences.
• Partner with RF, ML, and product teams to deliver integrated systems.
• Define the trust boundary between hardware and software.

What we’re looking for...

• 3–6 years writing systems-level firmware for embedded targets with real depth, not glue code on top of HALs
• Strong command of C with the ability to adopt new systems languages (Rust, Zig, C++) when appropriate.
• Proven background in red teaming, offensive security research, or adversarial testing targeting embedded systems and physical hardware.
• Reasons about trust boundaries, failure modes, and adversarial inputs before they become vulnerabilities.
• Thrived in an early-stage startup.
• Comfortable operating without perfect specs or complete information.
• U.S. Person status required (may involve export-controlled data).

Bonus if you’ve...

• Shipped firmware on microcontrollers and OS-based embedded systems.
• Written firmware for systems with secure boot, verified OTA, or hardware-enforced trust boundaries
• Done RF/SDR-adjacent work or integrated wireless radios at the firmware layer
• Maintained embedded Linux systems (custom rootfs, systemd services, power management)
• Held a security certification or contributed to a CVE, hardware CTF, or published security research.

What you’ll do...

• Own firmware across RTOS, embedded Linux, wireless radios, GPS, and custom embedded hardware.
• Write and maintain system daemons and firmware modules with strict fault isolation
• Own secure boot and verified firmware update pipelines end-to-end
• Conduct adversarial review of firmware attack surfaces (e.g. USB, BLE, UART, OTA) and close what you find
• Partner with RF and ML teams on high-throughput signal capture and real-time processing pipelines.
• Build and maintain hardware validation tooling; reduce bring-up friction on every successive board spin.

How we select...

• Short application
• 20-minute intro call
• Technical deep-dive
• Practical problem discussion
• References and offer

Final facts.

Base salary up to $220,000 depending on qualifications, experience, and impact. Total compensation includes equity, premium insurance, 401(k), flexible PTO, and other individual benefits.

You’ll join us on-site at our HQ in New York City with occasional domestic and global deployments.