Software Security Analyst (m/f/d)

Description

The team is hiring a senior analyst to find and assess vulnerabilities in embedded systems, especially where hardware meets software.

You will examine low-level firmware, boot code and system components to find weaknesses that an attacker could exploit. You will also work with development teams to help them build more secure designs. The role calls for a systems-oriented mindset, a drive to understand attack methods, and comfort reasoning about complicated execution environments.

You will use and help develop modern analysis methods, including AI-assisted vulnerability discovery, to make analysis both deeper and more scalable. If you already work with LLMs or agent-based workflows for code and system analysis, you can apply and extend those skills on real embedded security work.

Both experienced security researchers and strong embedded engineers who want to move into security are welcome to apply.

Responsibilities

• Analyze embedded software in depth, including bare-metal code, RTOS and trusted execution environments.
• Review boot flows, privilege boundaries and security-critical parts such as crypto libraries, key handling and isolation mechanisms.
• Find root causes, and judge how exploitable a weakness is and how much damage it could do.
• Support security certifications and evaluations such as PSA, SESIP and Common Criteria.
• Examine PSIRT incidents and turn them into structural improvements.
• Build and use analysis methods and tools, including static analysis, fuzzing, scripting and automation.
• Test and assess AI-assisted techniques for code analysis and vulnerability discovery, such as LLM-based workflows.
• Design and improve workflows that pair static and dynamic analysis with AI-assisted methods.
• Study new attack techniques that matter for embedded systems.
• Work with development teams to turn findings into practical mitigations.

Requirements

• A degree in Electrical Engineering, Computer Science, Mathematics or a related field.
• A strong grasp of low-level system behavior, including memory layout, interrupts, privilege levels and concurrency.
• Solid C programming experience and familiarity with ARM and/or RISC-V.
• Experience debugging and analyzing code at the assembly level.
• Strong differentiator: experience in vulnerability research, reverse engineering or exploit development.
• Strong differentiator: familiarity with static and dynamic analysis tools, fuzzing or symbolic execution.
• Strong differentiator: understanding of common vulnerability classes such as memory corruption, logic flaws and side channels.
• Strong differentiator: experience with debugging interfaces such as JTAG, trace and GDB.
• Strong differentiator: experience using or evaluating AI-assisted code analysis or vulnerability discovery tools.
• Strong differentiator: experience building or integrating automated analysis workflows, for example through scripting, pipelines or agent-based approaches.
• Strong differentiator: Rust experience, or interest in memory-safe system design.
• You think analytically and are curious about how systems fail under attack.
• You can work independently and lead complex technical investigations.
• You want to combine deep technical analysis with modern AI-assisted techniques.
• You communicate technical findings and risks clearly to varied audiences.
• You work well with development and architecture teams.
• Note: you may or will be responsible for security-related tasks. The work may or will fall under security certifications, so you need a careful and dependable way of working.

Conditions

The role is full-time and graded in Employment Group V of the Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung, as required by the Austrian Equal Treatment Act.

For roles in Gratkorn, pay is competitive with the electronics and semiconductor industry benchmarks, and individual experience and expectations are taken into account.

The company welcomes applications regardless of background and treats all candidates equally.

Benefits

• Home office options.
• Flexible working hours.
• Meal benefits and other perks.