Senior Embedded Security Engineer

Description

The company is a wholly owned subsidiary of a larger parent and builds mesh networking radios and communications systems that stay online in demanding settings on the ground, in the air and at sea.

Its radios and proprietary MIMO waveform carry communications for defense, law enforcement and public safety customers worldwide.

This role sits in the Software Engineering team and reports to the Director of Software Engineering.

The work is to protect the company's embedded systems from threats by designing strong security controls, running security assessments and keeping the systems aligned with industry standards.

Responsibilities

• Manage vulnerabilities across Linux-based embedded systems, including timely patches and kernel updates.
• Run security assessments and audits on these systems to find and reduce weaknesses.
• Design and build Linux security for embedded systems, with focus on secure boot and kernel hardening.
• Take on other related duties that fit the role, with assignments that management may change at any time.

Requirements

• Bachelor's degree in Computer Science, Computer Engineering or a related field, plus 5 years of embedded software development on networking products; or a high school diploma or GED plus 10 years in Linux network security, secure coding or embedded systems security.
• Write embedded C and C++ code and scripts for Linux environments.
• Hold an active U.S. Government SECRET clearance, or be able to obtain one within 15 months of hire.
• Be a U.S. citizen, because clients are under U.S. government contracts.
• Preferred: master's degree in cybersecurity, computer science, information technology or a related field.
• Preferred: experience using AI in penetration testing and code reviews.
• Preferred: experience with secure boot on Xilinx or Microchip SoCs.
• Preferred: familiarity with vulnerability scanners such as Blackduck and Coverity.
• Preferred: one or more certifications: CISSP, CISM, GIAC Security Expert (GSE), CompTIA Security+, or a Linux-specific certification such as LFCS or RHCE.
• Preferred: hands-on work implementing Linux security controls such as SELinux, AppArmor or iptables, and running security assessments.
• Preferred: working knowledge of Linux security frameworks such as CIS Benchmarks, NIST SP 800-53 or STIGs.
• Preferred: broad experience with secure development lifecycle (SDL) practices on Linux.
• Preferred: knowledge of Linux threat intelligence and threat modeling.
• Preferred: familiarity with container security (Docker, Podman) and cloud environments.
• Preferred: past work protecting Linux devices with limited compute resources.
• Preferred: understanding of real-time Linux and the security issues it raises.
• Preferred: knowledge of hardware security integration, such as TPM or Secure Enclave.
• Preferred: experience designing secure Linux communication systems with encryption, authentication and key management.
• Preferred: familiarity with mobile ad-hoc networking security on Linux platforms.
• Preferred: strong communication skills, able to explain Linux security to technical and non-technical audiences.
• Preferred: ability to work well with cross-functional teams.

Conditions

This is an office-based, hybrid position at the company's headquarters in West Los Angeles, CA.

You must be onsite at least 3 days per week, on Mondays, Wednesdays and Thursdays.

Travel is under 10%, domestic only, and relocation is provided.

The position is at the experienced level, and the company offers a referral payment plan.

Lift up to 20 lbs to set up demonstrations and testing.

Bend and reach to place items on lower and higher shelves, and kneel or squat to reach lower ones.

Lift up to 50 lbs when receiving incoming part shipments.

Walk and move around the labs.

Pay varies with job-related knowledge, skills and experience, and the actual offer depends on the individual candidate.

As a U.S. federal contractor, the company requires every candidate to be a U.S. person, either a citizen or permanent resident.

Candidates who do not meet every preferred skill are still encouraged to apply.

Benefits

• Incentive bonus plans.
• Medical, dental and vision benefits.
• 401(k) with company match.
• 10 paid holidays.
• Generous paid time off.
• Employee stock purchase plan.
• Paid parental and family leave.
• Other benefits as listed by the company.