[EMC] 10 Senior Embedded Security Engineer – Linux / Android Platforms (Joining Bonus)

🎁Quarter 4 JOINING BONUS
Candidates with 4+ years of relevant experience who join BGSV by the end of 31 December 2026 can receive a Joining Bonus equivalent to 1 month’s gross salary, subject to program eligibility and terms & conditions.
About the Role
We are looking for 10 Senior Embedded Security Engineers to design, implement, and validate end-to-end security solutions on modern embedded platforms.
This role is open to candidates from multiple domains, including Automotive, IoT, Mobile Devices, and Embedded Systems.
If you have hands-on experience securing Linux / Android-based systems, SoCs, or connected devices, and are interested in working on automotive-grade platforms such as Infotainment (IVI) and ADAS, we strongly encourage you to apply.
You will work on modern SoC platforms (e.g. Qualcomm, Renesas, TI, Marvell) running Android Automotive, Linux, QNX, or AUTOSAR-based systems, contributing to secure, scalable, and production-ready embedded solutions.
Main Responsibilities
1. Security Architecture & Engineering
Design and implement end-to-end security features for embedded platforms, including: Secure Boot, Trusted Execution Environments (TEE), Secure storage, Secure update mechanisms, Secure communication, etc...
Contribute to security architecture definition for embedded and connected systems.
2. Threat Modeling & Reviews
Perform security architecture reviews and threat modeling for infotainment, ADAS, IoT, or connected device platforms.
Identify risks, define mitigation strategies, and drive security improvements early in the development lifecycle.
3. Security Implementation & Hardening
Implement security hardening for Linux / Android / QNX systems.
Conduct secure code reviews and collaborate with development teams to address vulnerabilities.
Support integration of access control and system hardening mechanisms (e.g. SELinux, AppArmor).
4. Testing & Validation
Perform security testing and validation, including: Static and dynamic analysis, Fuzzing, Penetration testing
Validate security features on real hardware and production-like environments.
5. Process & Compliance
Develop and maintain security requirements and security engineering processes (SEP).
Support compliance with relevant security standards and best practices.
Mandatory Qualifications
Educational background: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cryptography, or a related technical field
7-15 years of overall experience, with at least 2-5 years of experience in embedded software development, system software, or security engineering (backgrounds from Automotive, IoT, Mobile Devices, Consumer Electronics are all welcome)
Practical experience with Linux and/or Android platforms, particularly in BSP, middleware, system services, or other low-level system components.
Solid understanding of cybersecurity fundamentals, including cryptography, secure communication protocols, secure coding practices, and security testing principles.
Hands-on experience implementing or supporting embedded system security features, such as secure boot, system trust mechanisms, secure storage, secure update/OTA, and secure communication between components or devices.
Nice-to-Have (Any of the following will be a strong advantage, but are not mandatory)
Good knowledge or hands-on experience in development with modern SoC architectures, such as: Qualcomm, Renesas (RCAR), TI, etc.
Experience in QNX development
Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.)
Good knowledge or hands-on experience in following areas:
Secure Boot.
Hardware-back security such as Trustzone (Arm TrustZone, OP-TEE, etc.), HSM, etc.
Storage security (disk encryption, dm-verity, etc.).
Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec, etc.).
Access control & hardening (SELinux, AppArmor, etc.).
Signing tools (Android signing, secure boot signing, etc.).
Linux / Android / QNX security development/hardening.
Network security, firewall.
Security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.).

Employment type
Full-time

Work arrangement
No