Systems Security Software Engineer

External Only | Blueprint Technologies; Redmond (WA); Hybrid; USD 90,000 - 103,000; Full time

Job summary

External Only | Blueprint Technologies is seeking an Embedded Software Engineer to help build an advanced platform that automates firmware security analysis using modern compiler technologies, fuzzing frameworks, and AI-assisted workflows.

You will design and implement scalable tooling in C++, Python, and LLVM to analyze firmware at scale, develop compiler passes, and create fuzzing harnesses that maximize code coverage while reducing false positives.

Qualifications

• Seven or more years of professional experience developing systems software with C or C++.
• Five or more years of experience with LLVM, compiler infrastructure, compiler development, or program analysis.
• Three or more years of experience with fuzzing, vulnerability research, or application security.
• Proficiency with Python for automation, tooling, or pipeline development.
• Experience working within Linux development environments.

Responsibilities

• Design, develop, and maintain automated firmware security-analysis pipelines for vulnerability discovery.
• Build low-level tooling with C++, Python, and LLVM to analyze firmware at scale.
• Develop compiler passes and transformations that convert firmware into analyzable LLVM IR.
• Create, improve, and maintain fuzzing harnesses that maximize code coverage and uncover security vulnerabilities.
• Investigate crashes identified during fuzzing campaigns and perform root-cause analysis.
• Improve vulnerability-detection accuracy by reducing false positives and strengthening automated analysis workflows.
• Develop and enhance AI-assisted systems that classify firmware functionality and generate security-analysis artifacts.
• Debug firmware-rehosting environments and resolve issues affecting automated analysis.
• Collaborate with compiler engineers, software engineers, and security researchers to review architectures and validate security findings.
• Design scalable automation, testing, and CI workflows that improve development efficiency and platform reliability.
• Improve code quality through testing, documentation, dependency management, and engineering best practices.

Skills

C++

Python

LLVM

Fuzzing

Linux

Git

AI-assisted workflows

Education

Bachelor's degree in computer science, computer engineering, electrical engineering, or related field

Tools

LLVM

libFuzzer

AFL

AFL++

Job description

We’re looking for an Embedded Software Engineer to help build and evolve an advanced platform that automates firmware security analysis using modern compiler technologies, fuzzing frameworks, and AI-assisted workflows.

In this role, you’ll develop scalable tools that transform firmware into analyzable intermediate representations, automate vulnerability discovery, and improve the accuracy and efficiency of security-analysis pipelines. You’ll combine systems programming, compiler engineering, firmware security, and machine‑learning techniques to solve complex security challenges.

You’ll collaborate with engineers and security researchers to prototype new capabilities, prepare them for production, and support the development of a platform designed for future open‑source release.

What You’ll Do

• Design, develop, and maintain automated firmware security‑analysis pipelines for vulnerability discovery.
• Build low‑level tooling with C++, Python, and LLVM to analyze firmware at scale.
• Develop compiler passes and transformations that convert firmware into analyzable LLVM Intermediate Representation.
• Create, improve, and maintain fuzzing harnesses that maximize code coverage and uncover security vulnerabilities.
• Investigate crashes identified during fuzzing campaigns and perform root‑cause analysis.
• Improve vulnerability‑detection accuracy by reducing false positives and strengthening automated analysis workflows.
• Develop and enhance AI‑assisted systems that classify firmware functionality and generate security‑analysis artifacts.
• Debug firmware‑rehosting environments and resolve issues affecting automated analysis.
• Collaborate with compiler engineers, software engineers, and security researchers to review architectures and validate security findings.
• Design scalable automation, testing, and continuous‑integration workflows that improve development efficiency and platform reliability.
• Improve code quality through testing, documentation, dependency management, and engineering best practices.
• Contribute to release readiness, developer onboarding, and preparation for open‑source release.
• Evaluate and integrate compiler, security, and AI technologies that strengthen platform capabilities.

What You’ll Bring

• Bachelor’s degree in computer science, computer engineering, electrical engineering, or a related technical field, or equivalent practical experience.
• Seven or more years of professional experience developing systems software with C or C++.
• Five or more years of experience with LLVM, compiler infrastructure, compiler development, or program analysis.
• Three or more years of experience with fuzzing, vulnerability research, or application security.
• Strong understanding of LLVM Intermediate Representation and compiler‑optimization concepts.
• Experience debugging low‑level software, memory‑corruption issues, and complex system behavior.
• Proficiency with Python for automation, tooling, or pipeline development.
• Experience working within Linux development environments.
• Strong problem‑solving skills with the ability to debug across compiler, firmware, and systems‑software layers.
• Experience with Git and modern software‑development practices.

Preferred Qualifications

• Experience with firmware security, embedded systems, or bare‑metal software development.
• Knowledge of firmware architectures, hardware abstraction layers, memory‑mapped input/output, or firmware‑rehosting techniques.
• Experience with fuzzing technologies such as libFuzzer, AFL, or AFL++.
• Experience with sanitizer technologies, including AddressSanitizer, UndefinedBehaviorSanitizer, or MemorySanitizer.
• Experience with static analysis, data‑flow analysis, call‑graph analysis, CodeQL, or similar security‑analysis frameworks.
• Experience building developer platforms, continuous‑integration automation, or large‑scale engineering tooling.
• Familiarity with cross‑compilation toolchains and embedded‑development workflows.
• Experience integrating large language models or AI‑assisted automation into developer or security tooling.
• Experience contributing to open‑source software projects.
• Experience developing production‑quality testing frameworks and automation infrastructure.
• Ability to succeed within a research‑oriented environment while delivering production‑ready software.
• Strong collaboration and communication skills across engineering and research teams.

Compensation

At Blueprint, we strive to offer competitive pay that reflects the value of our team members. Compensation for this role is influenced by a variety of factors, including skills, education, responsibilities, experience, and geographic market.

For candidates based in Washington State, the anticipated compensation range is $65.00 to $75.00 USD per hour. Please note that we typically do not hire new employees at the top of the posted range. Actual starting pay will be determined based on experience, skills, and internal equity. The final compensation and job title may vary depending on the selected candidate’s qualifications.

Location and Work Arrangement

Redmond, Washington

This is a hybrid role that requires three days per week onsite in Redmond.

As set forth in External Only | Blueprint Technologies’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities.

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

We may use AI-assisted tools to support parts of the recruiting process, including identifying and evaluating candidates based on job‑related qualifications and experience. Human recruiters and hiring managers remain actively involved in all hiring decisions.