Firmware Security Certification Engineer

HP•Vancouver, WA

9d•$105,050 - $161,800•Hybrid

About The Position

HP is seeking a full-time Firmware Security Certification Engineer in Vancouver to provide hands-on technical expertise in executing Common Criteria certification activities for Dune-based devices. The role works across firmware engineering, security, networking, test, and certification teams to translate certification requirements into implementable technical controls, reproducible evidence, and successful laboratory evaluations. The ideal candidate combines knowledge of Dune firmware with networking, automation, scripting, troubleshooting, and technical communication skills. The engineer will serve as a technical subject-matter expert for Common Criteria certification, map security and assurance requirements to firmware architecture and device behavior, and collaborate with architects to identify gaps and validate remediation. The role includes configuring, building, deploying, and troubleshooting firmware in certification test environments; developing automated tests and repeatable evidence workflows; and conducting functional, security, regression, negative, and interoperability testing. The engineer will also investigate issues across firmware and related services, prepare technical artifacts and evaluator responses, work with internal teams and external evaluation laboratories, and improve certification efficiency through reusable automation and earlier validation. The position may be performed on site or in a hybrid arrangement in Vancouver, as required by the team. Relocation is offered. The stated annual pay range is $105,050 to $161,800 USD, with additional bonus and/or equity opportunities for United States of America candidates. Pay varies by location, job-related knowledge, skills, and experience. HP describes a comprehensive benefits package and reserves the right to modify compensation and benefits information, subject to applicable law.

Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
Demonstrated experience developing, integrating, debugging, or validating Dune firmware or a closely related embedded device platform.
Strong understanding of embedded firmware architecture, operating-system services, device configuration, logging, and diagnostic methods.
Practical networking expertise, including TCP/IP, IPv4/IPv6, DNS, DHCP, HTTP/HTTPS, TLS, SNMP, 802.1X, certificates, and network troubleshooting.
Experience creating automated tests and scripts using Python, shell scripting, PowerShell, or comparable languages.
Ability to analyze complex technical requirements, isolate defects, reproduce issues, and drive them to closure across multiple teams.
Experience with source control, defect tracking, build environments, test frameworks, and continuous integration workflows.
Strong written and verbal communication skills, including producing precise technical evidence and explaining issues to engineers, evaluators, and program stakeholders.
Ability to work on site or in a hybrid arrangement in Vancouver, as required by the team.

Nice To Haves

Direct experience supporting a Common Criteria evaluation, including Security Target development, evaluation evidence, evaluator interactions, vulnerability analysis, or certification maintenance.
Knowledge of Common Criteria concepts, Protection Profiles, assurance activities, and certification-lab workflows.
Experience with enterprise printers, multifunction devices, embedded Linux, secure boot, cryptographic services, authentication, access control, audit logging, or secure update mechanisms.
Familiarity with packet capture and network diagnostic tools, security testing tools, and API or protocol test automation.
Experience developing test harnesses, managing test data, and integrating automated security tests into continuous integration pipelines.
Understanding of secure development lifecycle practices, threat modeling, vulnerability remediation, and security certification dependencies.

Responsibilities

Serve as a technical subject-matter expert for Common Criteria certification of Dune-based devices.
Analyze Security Target, Protection Profile, Security Functional Requirement, and assurance-evidence needs and map them to Dune firmware architecture and device behavior.
Partner with firmware and security architects to identify gaps, define remediation plans, and validate implementation readiness.
Configure, build, deploy, and troubleshoot Dune firmware in certification test environments.
Develop and maintain automated tests, scripts, utilities, and repeatable workflows that produce objective certification evidence.
Execute functional, security, negative, regression, and interoperability testing, including network protocol and secure communications testing.
Investigate test failures across firmware, networking, services, authentication, cryptography, and device configuration.
Prepare technical artifacts, test procedures, results, defect reports, and responses to evaluator questions.
Work with internal engineering teams and external evaluation laboratories to resolve technical issues and maintain certification schedules.
Improve certification efficiency through reusable automation, documented methods, and earlier validation within the development lifecycle.