Qualification

Active security clearanceDeepExpert-level applied cryptographyDemonstrated principal-level impactHardware reverse engineering

Required

Active security clearance, or the ability to obtain and maintain one.
Deep, hands-on expertise in embedded, hardware, and firmware security — including hardware attack surfaces, side-channel and fault-injection attacks, firmware security, secure boot, and hardware security modules (HSMs).
Strong software development skills in C and C++, plus solid engineering fundamentals (data structures, algorithms, API design, and debugging
production systems) and comfort working across multiple languages and at low levels (assembly, firmware).
Proven track record of building production security platforms, tooling, and foundational services used by hardware and embedded engineering teams.
Deep, expert-level PKI knowledge with hands-on experience designing and operating PKI for embedded and resource-constrained systems —certificate-based device authentication, firmware signing certificate chains, secure boot PKI hierarchies, certificate provisioning and rotation for constrained devices (where rotation isn't trivial, e.g., spacecraft in orbit), secure key storage, and HSM integration.
Expert-level applied cryptography: implementing and reasoning about cryptographic systems to stringent government standards (FIPS 140-3, and familiarity with CNSA 2.0 and CCSDS SDLS), and experience with the practical challenges of post-quantum cryptography migration. Strong familiarity with common NIST publications (e.g., the 800-series).
Experience applying security testing methodologies for hardware and firmware, and building the tooling and frameworks to automate that testing at scale across engineering teams.
Demonstrated principal-level impact: setting security strategy and technical direction across an organization, independently identifying and prioritizing the risks that matter most, driving hardening initiatives end to end, raising the security bar and mentoring other engineers, thriving on ambiguous and novel problems, and influencing and aligning teams without direct authority.

Preferred

Hands-on experience taking cryptographic modules through formal FIPS validation (CMVP), beyond implementing to the standard.
Experience with real-time or safety-critical embedded systems — timing constraints, deterministic execution, interrupt handling, and the security implications of hard real-time requirements.
Background in a regulated or high-assurance domain: aerospace, defense, avionics, medical devices, or industrial control systems.
Hardware reverse engineering, firmware analysis, and cryptographic implementation experience.
FPGA/VHDL security and RF/radio security.
HIL/SIL test infrastructure and embedded Linux environments.
Supply-chain security experience and a track record of hardening build pipelines for embedded/firmware systems.
Cross-domain thinking that connects hardware security requirements to cloud infrastructure, network security, and system architecture.

Principal Embedded Systems Security Engineer at Trueanomalyinc · LumiJobs

Principal Embedded Systems Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Trueanomalyinc

More roles at Trueanomalyinc