Full job description

We are seeking a Principal Embedded Security Vulnerability Analyst to lead deep technical analysis of embedded systems, focusing on identifying and understanding vulnerabilities at the hardware/software boundary.

You will drive the discovery and analysis of complex vulnerabilities in low-level firmware, boot code, and system components, and influence the security architecture of next-generation products. This role requires expert-level systems thinking, a deep understanding of attack techniques, and the ability to reason about complex execution environments.

You will also define and advance modern vulnerability analysis approaches, including the integration of AI-assisted and agentic workflows, to significantly improve the depth, scalability, and effectiveness of security assessments.

If you are already exploring how LLMs and agentic workflows can augment deep code and system analysis, this role provides an opportunity to apply, scale, and shape these approaches across an organization.

We welcome both:

experienced security researchers
highly experienced embedded engineers with a demonstrated transition into security

Your Responsibilities

Lead in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments)
Drive analysis of boot flows, privilege boundaries, and security-critical components (e.g., crypto libraries, key handling, isolation mechanisms)
Own root cause analysis and assess exploitability and systemic impact of identified weaknesses
Define and guide security evaluation strategies for certifications (e.g., PSA, SESIP, Common Criteria)
Lead analysis of PSIRT incidents and drive structural and architectural improvements
Architect and develop advanced analysis methodologies and tooling (static analysis, fuzzing, automation frameworks)
Define and scale the use of AI-assisted techniques for code analysis and vulnerability discovery (e.g., LLM-based and agentic workflows)
Design and institutionalize workflows that combine traditional analysis (static/dynamic) with AI-assisted approaches
Evaluate and introduce emerging attack techniques and incorporate them into internal methodologies
Influence product teams and architecture decisions by translating findings into systemic mitigations
Mentor and guide other engineers in vulnerability analysis and research methodologies