Senior Embedded Security Engineer for Firmware & IoT

Insight Global

Naperville (IL)

Hybrid

USD 124,000 - 165,000

Full time

47 hours ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Insight Global is seeking a Senior Firmware Cybersecurity Software Engineer to architect, design, develop, and secure embedded firmware and IoT software solutions for a Fortune 500 chemical client. This senior role focuses on secure software development, vulnerability remediation, threat-informed design, and continuous improvement across connected devices and IoT platforms.

You will partner with stakeholders to define requirements, implement hardware security controls, and lead vulnerability

Qualifications

Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, Cybersecurity, or a similar technical degree.
5+ years’ experience in software or firmware development in a fast-moving product development environment.
3+ years working in C or C++ for embedded firmware development.
Experience with secure software development practices, including secure coding and vulnerability remediation.
Experience with embedded RTOS or bare-metal development and security considerations for constrained devices.
Experience with vulnerability management processes and SBOM usage.

Responsibilities

Partner with stakeholders to define secure system requirements for embedded firmware, IoT edge devices, and gateways.
Design, develop, and test secure firmware and IoT software using secure-by-design principles.
Implement hardware security controls including secure elements, TPMs, and hardware root of trust.
Apply memory safety practices and compiler hardening to mitigate common vulnerabilities.
Lead vulnerability triage, remediation planning, patch development, and release coordination.
Perform threat modeling, secure code reviews, static and dynamic analysis, and security testing.
Design and implement secure OTA update pipelines with signing and encryption.
Integrate SAST/DAST and firmware security checks into CI/CD pipelines.
Collaborate with cross-functional teams to deliver secure connected products.
Stay current with cybersecurity standards such as NIST SSDF, IEC 62443, ISO 27001, and OWASP.