Senior Embedded Systems Security Engineer

About the role

CENSUS is an internationally acclaimed cybersecurity services provider delivering consulting and assessment services for products, infrastructure and organizations. The Senior Embedded Systems Security Engineer will work with clients to assess and improve the security of embedded products across multiple industries.

Key responsibilities

• Review product security designs, document missing controls and drive analysis for security improvements.
• Execute threat modelling, attack surface enumeration and attack‑tree creation for embedded system products.
• Research, compare and propose technologies that satisfy client requirements and align with their strategies.
• Perform end‑to‑end security posture assessments via source‑code auditing, functional testing, fuzz testing and other applicable methodologies.
• Verify that implementations align with the product’s security architecture, requirements and threat model.
• Document and present product security risks in both technical and business‑oriented language.
• Support a small team of 2‑3 security engineers and consultants in assessing and researching bleeding‑edge technologies.

Required profile

• MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering, or equivalent practical experience.
• 4+ years of experience in embedded or system‑level software security.
• Proven experience developing, auditing or testing security solutions for embedded, IoT, general computing or mobile systems.

Required skills

• Embedded Systems, Linux or Real‑Time Operating Systems security concepts.
• System security architecture review and research.
• ARM architecture debugging techniques.
• Programming in C, C++, Rust or ARM Assembly for system software (bootloaders, drivers, kernel, services).
• Secure boot, firmware and software integrity, OTA updates, hardware‑backed device attestation.
• Cryptographic primitives and best practices (inline crypto engines, storage encryption, attestation, key rooting, derivation, wrapping/unwrapping).
• Identifying and reporting security vulnerabilities (memory corruption, side‑channel attacks, business logic).
• HW‑backed security features (MPU, MMU/IOMMU, NX, DAC/MAC, stack canaries, heap hardening).
• Familiarity with TEE, TPM, SE, SPU and related isolation technologies.
• Experience working with international teams across time zones.