Firmware Security Certification Engineer

HP•Vancouver, WA

1d•$105,050 - $161,800

About The Position

HP is seeking a full-time Firmware Security Certification Engineer in Vancouver to provide hands-on technical expertise in Common Criteria certification activities for Dune-based devices. The role works across firmware engineering, security, networking, testing, and certification teams to translate certification requirements into implementable technical controls, reproducible evidence, and successful laboratory evaluations. The ideal candidate has deep knowledge of Dune firmware, along with networking, automation, scripting, troubleshooting, and technical communication skills.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
Demonstrated experience developing, integrating, debugging, or validating Dune firmware or a closely related embedded device platform.
Strong understanding of embedded firmware architecture, operating-system services, device configuration, logging, and diagnostic methods.
Practical networking expertise, including TCP/IP, IPv4/IPv6, DNS, DHCP, HTTP/HTTPS, TLS, SNMP, 802.1X, certificates, and network troubleshooting.
Experience creating automated tests and scripts using Python, shell scripting, PowerShell, or comparable languages.
Ability to analyze complex technical requirements, isolate defects, reproduce issues, and drive them to closure across multiple teams.
Experience with source control, defect tracking, build environments, test frameworks, and continuous integration workflows.
Strong written and verbal communication skills, including producing precise technical evidence and explaining issues to engineers, evaluators, and program stakeholders.
Ability to work on site or in a hybrid arrangement in Vancouver, as required by the team.

Nice To Haves

Direct experience supporting a Common Criteria evaluation, including Security Target development, evaluation evidence, evaluator interactions, vulnerability analysis, or certification maintenance.
Knowledge of Common Criteria concepts, Protection Profiles, assurance activities, and certification-lab workflows.
Experience with enterprise printers, multifunction devices, embedded Linux, secure boot, cryptographic services, authentication, access control, audit logging, or secure update mechanisms.
Familiarity with packet capture and network diagnostic tools, security testing tools, and API or protocol test automation.
Experience developing test harnesses, managing test data, and integrating automated security tests into continuous integration pipelines.
Understanding of secure development lifecycle practices, threat modeling, vulnerability remediation, and security certification dependencies.

Responsibilities

Serve as a technical subject-matter expert for Common Criteria certification of Dune-based devices.
Analyze Security Target, Protection Profile, Security Functional Requirement, and assurance evidence needs, and map them to Dune firmware architecture and device behavior.
Partner with firmware and security architects to identify gaps, define remediation plans, and validate implementation readiness.
Configure, build, deploy, and troubleshoot Dune firmware in certification test environments.
Develop and maintain automated tests, scripts, utilities, and repeatable workflows that produce objective certification evidence.
Execute functional, security, negative, regression, and interoperability testing, including network protocol and secure communications testing.
Investigate test failures across firmware, networking, services, authentication, cryptography, and device configuration.
Prepare technical artifacts, test procedures, results, defect reports, and responses to evaluator questions.
Work with internal engineering teams and external evaluation laboratories to resolve technical issues and maintain certification schedules.
Improve certification efficiency through reusable automation, documented methods, and earlier validation within the development lifecycle.