IoT Security Engineer - Secure Boot, PKI & OTA

Enfint; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Enfint is seeking an embedded security engineer to bring an existing product into compliance with the EU Cyber Resilience Act. You will work with firmware and a large legacy codebase to implement Secure Boot and signed OTA updates, PKI and device identity, and robust authentication and encryption.

You will define security architecture, manage SBOM and vulnerabilities, perform firmware fuzzing and penetration testing, and document your designs. IoT security experience is a plus.

Qualifications

• Experience with C/C++.
• Experience with Embedded Linux.
• Experience with Yocto.
• Experience with PKI.
• Experience with Secure Boot.
• Experience with firmware signing.
• Experience with SBOM.
• Nice to have: IoT security experience, Industrial Security experience.

Responsibilities

• Bring an existing embedded product in line with EU Cyber Resilience Act (CRA) requirements.
• Work with firmware and a large legacy codebase.
• Implement Secure Boot and signed and secure OTA updates.
• Manage PKI and device identity.
• Implement authentication, encryption, and access control.
• Manage SBOM and vulnerabilities.
• Perform firmware fuzzing and penetration testing.
• Define security architecture and documentation.
• Use AI-assisted code analysis.

Skills

C/C++

Embedded Linux

Yocto

PKI

Secure Boot

Firmware signing

SBOM

IoT security

Job description

Enfint is seeking an embedded security engineer to bring an existing product into compliance with the EU Cyber Resilience Act. You will work with firmware and a large legacy codebase to implement Secure Boot and signed OTA updates, PKI and device identity, and robust authentication and encryption.

You will define security architecture, manage SBOM and vulnerabilities, perform firmware fuzzing and penetration testing, and document your designs. IoT security experience is a plus.