You will work in the Silicon Firmware group as a member of the security team, focusing on the security of our silicon and connected products of the future, using ultra-wideband (UWB), Matter, Thread, Zigbee and Bluetooth.
Aware of the latest security threats, you will collaborate on hardware design and develop firmware to harden our products against these.
Responsibilities:
Develop and design secure firmware, including threat modeling, security protocols, and cryptographic algorithms, with a focus on resource-constrained and connected devices.
Implement and test secure firmware and tooling for our silicon, including subjects such as secure boot and over-the-air upgrades, cryptographic hardware acceleration, and other cryptographic services in the context of wireless protocols.
Conduct thorough code reviews to identify security vulnerabilities and implement appropriate solutions, particularly in the context of wireless communication protocols.
Perform penetration testing, fuzzing, and other security testing techniques to ensure the robustness of embedded systems against potential threats, including attacks targeting BLE, UWB, and 802.15.4 communication.
Ensure compliance with industry standards and regulations (such as ISO 27001, NIST, and IEC 62443) and industry and government security certification programs (such as PSA, SESIP and Common Criteria) throughout the development lifecycle, with a specific focus on wireless communication security.
Create, review, and maintain security documentation, including security requirements, design specifications, and threat models, with consideration for the unique challenges posed by the IoT ecosystem.
Work closely with cross-functional teams, including software engineers, hardware engineers, and product managers, to integrate security best practices into the development process for wireless-enabled embedded systems.
Participate in incident response activities, including investigating security incidents and implementing corrective measures, with a particular emphasis on mitigating risks associated with wireless communication vulnerabilities.