Firmware Engineer - Cybersecurity at Schweitzer Engineering Laboratories

Job description

As a Firmware Engineer focused on Cybersecurity, a typical day might include: Participate in the design, implementation, and test of embedded firmware systems with emphasis on cybersecurity. Design and implement security features such as secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging. Apply secure coding practices, threat modeling, and security design reviews throughout the firmware development lifecycle. Perform security testing and vulnerability analysis, including static analysis, fuzzing, and penetration testing; analyze and remediate identified vulnerabilities. Understand hardware and software interactions, and collaborate with Hardware Engineers on hardware-based security features (e.g., secure elements, TPMs, hardware crypto accelerators, and debug-port protection). Support compliance with applicable cybersecurity standards and customer requirements (e.g., NERC CIP, IEC 62443, IEEE 1686, and NIST guidance). Prepare and maintain security requirements, designs, and test documentation. Mentor Associate Engineers and Technicians in secure development practices. Required Qualifications Typically 2 years experience in embedded systems firmware development including: Real-time firmware design C, C and assembly languages Embedded Linux systems development (C, C , Python, and other scripting languages) Working knowledge of cybersecurity fundamentals for embedded systems, including: Applied cryptography (symmetric/asymmetric encryption, hashing, digital signatures, PKI, TLS) Secure boot and secure firmware update Secure coding practices and memory-safety vulnerabilities Threat modeling and risk assessment Strong writing, documentation, and speaking skills Ability to learn new skills and assume new responsibilities Ability to work cooperatively in a team environment Preferred Qualifications Experience with static analysis, fuzzing, and penetration testing tools Experience with hardware security features (secure elements, TPMs, TrustZone or equivalent, hardware crypto engines) Experience with secure network protocols and role-based access control Knowledge of cybersecurity standards (NERC CIP, IEC 62443, IEEE 1686, NIST) Security certifications (e.g., CSSLP, GICSP, or similar) Industrial controls 3-phase electric power systems Modern communications protocols Digital and analog circuitry Digital communications and signal processing Project management Location Pullman, WA - SEL corporate office is located in Eastern Washington where you ll enjoy an unmatched quality of life. Enjoy the smaller town life: country space, freedom from traffic, easy access to recreational activities in nearby mountains, rivers, and forests, as well as great schools and universities. Competitive pay. Superior benefits. Inspiring work. People are at the core of our company and we hire employee-owners. We welcome you to learn more about how we support employees. We’re 100% employee owned. Retirement benefits include an employer funded stock ownership plan (ESOP) and personal 401(k) options. We offer top tier medical, prescription, dental, vision, life, and disability insurance. We recognize the importance of a healthy life balance and offer: 10 paid holidays, annual vacation accrual starting at 12 days, 9 paid sick days, and paid family and medical leave that covers 90% of your pay. We foster growth and development of our employees through avenues such as STEM courses, apprenticeships, tuition assistance, and engineering development programs. Ask our team about other benefits including wellness, fertility, adoption, and flexible spending benefits. Salary Range Data We anticipate filling this position as a Firmware Engineer: $89,000 - $134,100 annually. Our compensation ranges are based on the responsibilities of the role. Starting pay is determined individually and considers factors such as relevant experience, skills, knowledge, and training. Candidates may be considered at different levels based on their background. As a result, pay may vary to align with the level of the role. Communication with Applicants We communicate with all applicants. If you do not receive a response about your application, please check your SPAM filter or reach out to us at careers selinc.com . SEL is an Equal Opportunity Employer: Vets/Disabled.

Requirements

Must-haves

As a Firmware Engineer focused on Cybersecurity, a typical day might include:
Participate in the design, implementation, and test of embedded firmware systems with emphasis on cybersecurity.
Design and implement security features such as secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging.
Apply secure coding practices, threat modeling, and security design reviews throughout the firmware development lifecycle.
Perform security testing and vulnerability analysis, including static analysis, fuzzing, and penetration testing; analyze and remediate identified vulnerabilities.
Understand hardware and software interactions, and collaborate with Hardware Engineers on hardware-based security features (e.g., secure elements, TPMs, hardware crypto accelerators, and debug-port protection).
Support compliance with applicable cybersecurity standards and customer requirements (e.g., NERC CIP, IEC 62443, IEEE 1686, and NIST guidance).
Prepare and maintain security requirements, designs, and test documentation.
Mentor Associate Engineers and Technicians in secure development practices.
Typically 2 years experience in embedded systems firmware development including:
Real-time firmware design
C, C and assembly languages

Nice-to-haves

Experience with static analysis, fuzzing, and penetration testing tools
Experience with hardware security features (secure elements, TPMs, TrustZone or equivalent, hardware crypto engines)
Experience with secure network protocols and role-based access control
Knowledge of cybersecurity standards (NERC CIP, IEC 62443, IEEE 1686, NIST)
Security certifications (e.g., CSSLP, GICSP, or similar)
Industrial controls
3-phase electric power systems
Modern communications protocols
Digital and analog circuitry
Digital communications and signal processing
Project management
Competitive pay. Superior benefits. Inspiring work.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Wellness