Firmware Engineer - Cybersecurity

Schweitzer Engineering Laboratories • Pullman, WA

18d • Onsite

About The Position

The Firmware Engineer focused on Cybersecurity designs, implements, and tests embedded firmware systems with an emphasis on cybersecurity. The role develops security features including secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging. It applies secure coding practices, threat modeling, and security design reviews throughout the firmware development lifecycle, and performs security testing and vulnerability analysis using methods such as static analysis, fuzzing, and penetration testing. The engineer analyzes and remediates identified vulnerabilities and collaborates with Hardware Engineers on hardware-based security features. The position also supports compliance with applicable cybersecurity standards and customer requirements, maintains security requirements, designs, and test documentation, and mentors Associate Engineers and Technicians in secure development practices.

The position is located at SEL's corporate office in Pullman, Washington. SEL describes the location as offering small-town living and access to nearby mountains, rivers, and forests, along with schools and universities. The company is 100% employee owned and offers competitive pay and benefits.

Requirements

• Typically 2 or more years of experience in embedded systems firmware development.
• Experience with real-time firmware design.
• Experience with C, C++, and assembly languages.
• Experience with embedded Linux systems development, including C, C++, Python, and other scripting languages.
• Working knowledge of embedded-systems cybersecurity fundamentals, including applied cryptography (symmetric and asymmetric encryption, hashing, digital signatures, PKI, and TLS); secure boot and secure firmware updates; secure coding practices and memory-safety vulnerabilities; and threat modeling and risk assessment.
• Strong writing, documentation, and speaking skills.
• Ability to learn new skills and assume new responsibilities.
• Ability to work cooperatively in a team environment.

Nice To Haves

• Experience with static analysis, fuzzing, and penetration testing tools.
• Experience with hardware security features such as secure elements, TPMs, TrustZone or equivalent, and hardware crypto engines.
• Experience with secure network protocols and role-based access control.
• Knowledge of cybersecurity standards such as NERC CIP, IEC 62443, IEEE 1686, and NIST.
• Security certifications such as CSSLP, GICSP, or similar.
• Knowledge of industrial controls and three-phase electric power systems.
• Knowledge of modern communications protocols.
• Knowledge of digital and analog circuitry.
• Knowledge of digital communications and signal processing.
• Project management experience.

Responsibilities

• Participate in the design, implementation, and testing of embedded firmware systems, with emphasis on cybersecurity.
• Design and implement security features such as secure boot, firmware signing and updating, authentication and access control, cryptographic services, secure key storage, and security event logging.
• Apply secure coding practices, threat modeling, and security design reviews throughout the firmware development lifecycle.
• Perform security testing and vulnerability analysis, including static analysis, fuzzing, and penetration testing; analyze and remediate identified vulnerabilities.
• Collaborate with Hardware Engineers on hardware-based security features, including secure elements, TPMs, hardware crypto accelerators, and debug-port protection.
• Support compliance with applicable cybersecurity standards and customer requirements.
• Prepare and maintain security requirements, designs, and test documentation.
• Mentor Associate Engineers and Technicians in secure development practices.

Benefits

• Employer-funded stock ownership plan (ESOP).
• Personal 401(k) options.
• Medical, prescription, dental, vision, life, and disability insurance.
• 10 paid holidays.
• Annual vacation accrual starting at 12 days.
• 9 paid sick days.
• Paid family and medical leave covering 90% of pay.
• STEM courses, apprenticeships, tuition assistance, and engineering development programs.
• Wellness, fertility, adoption, and flexible spending benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed