Staff Firmware Engineer, Platform Security

Home > C/C++ programming jobs

Staff Firmware Engineer, Platform Security in USA

ALSO
Full time
Email

USA
08/16/2026
Report

Palo Alto, CA

Responsibilities

Define secure boot architecture across MCU families, including image signing, verification, anti-rollback, and production debug/JTAG lockdown.
Own on-device and fleet key strategies, key hierarchies, and HSM/OTP/secure-element integration with signing and PKI services.
Lead CAN/CAN-FD network security, including authentication, integrity, encryption, protected diagnostics, and secure UDS access.
Own end-to-end firmware update trust, including signed and encrypted payloads, on-device verification, rollback safety, and cloud-to-vehicle handoff.
Architect reusable security libraries and APIs for cryptographic wrappers, secure storage, and authentication services.
Lead threat modeling and hardening across boot, update, and network attack surfaces.
Drive security testing through benchtop proofs of concept, negative tests, hardware-in-the-loop scenarios, and CI checks.
Partner with firmware, cloud, manufacturing, and systems teams on requirements, production readiness, and trade-offs.
Mentor engineers and provide design leadership across the organization.

Requirements

8+ years of embedded software or firmware development experience with deep ownership of secure boot, cryptography, or vehicle/IoT security architecture.
Proven experience setting technical direction across multiple ECUs or products.
BS in an engineering discipline, preferably Computer Science or Electrical Engineering.
Hands-on expertise with AES, ECC/RSA, HMAC, certificates, key provisioning, OTP/fuse programming, and HSM or secure element usage in production.
Experience designing and shipping secure boot chains, bootloaders, signed firmware images, and OTA trust models in production.
Vehicle or industrial network security experience, including CAN/CAN-FD, authenticated messaging, and secure diagnostics, is preferred.
Expert-level C/C++ experience on bare-metal or RTOS platforms, with familiarity with linkers, memory maps, and JTAG/SWD debugging tools.
Ability to integrate signing and verification into CI and release pipelines and drive platform-wide adoption.
Strong communication, documentation, threat-modeling, runbook, and engineering mentorship skills.
Hardware-in-the-loop testing and emulation experience is preferred.

Benefits

Health, dental, and vision insurance covered up to 100% with FSA and HSA options.
One Medical membership and dedicated insurance advocates.
Fertility and family-building benefits through Progyny.
Flexible time off.
401(k) match.
Located in Silicon Valley.

Salary: $200k - $240k/yr

ALSO

We’re ALSO, an electric mobility company on a mission to build the world’s best small vehicles for moving people and goods, driven and autonomous. Originally incubated within Rivian, we’re rethinking transportation from first principles to create a new generation of smaller, smarter, and more con...

Similar positions

Security Software Engineer (L5)

Netflix
Full time

USA
10/25/2026
Salary: $400k-$680k

Remote

Principal Firmware Debug & Dev Engineer

Microsoft
Full time

USA
10/25/2026
Salary: $143k - $304k/yr

Raleigh, NC

Contract Staff Software Engineer

Mozilla
Contract

Canada
10/25/2026
Salary: C$131k-C$186k

Remote

Senior Manager - Application Security Research

American Express
Full time

USA
10/25/2026
Salary: $123k - $215k/yr

Phoenix, AZ

Senior Product Security Engineer

CHAOS Industries
Full time

USA
10/25/2026
Salary: $123k - $211k/yr

El Segundo, CA