Sr. Software Engineer - Embedded Security

Terumo BCT, Inc.•Lakewood, IL

4d•$136,300 - $170,300•Hybrid

About The Position

Senior Embedded Software Engineer responsible for designing and delivering cybersecurity-enabled software capabilities for safety-critical medical devices. Provide functional and empirical analysis related to the design, development, and implementation of software operating systems, including, but not limited to, utility software, development software, and diagnostic software. Participates in the design, implementation, integration, and support of cybersecurity features within embedded software. Works closely with software engineering, systems engineering, product security, and R&D cybersecurity teams to implement secure and resilient products.

Requirements

Bachelor’s degree in Computer Science or in an Engineering discipline or, equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.
Minimum 8 years of hands-on experience developing software in a regulated or safety-critical product environment.
Hands on experience implementing cybersecurity controls such as authentication, authorization, encryption, secure communications, access control, input validation, and secure data handling.
Experience identifying and mitigating security vulnerabilities and applying secure software development practices throughout the software development life cycle.
Demonstrated track record of shipping embedded software products.
Strong portfolio of implemented components in resource-constrained environments.
Demonstrated experience collaborating across cross-functional teams to align priorities, resolve issues, and deliver embedded software solutions.
Strong knowledge of computer science fundamentals, including design patterns, data structures, object-oriented programming, and software design.
Strong proficiency in modern C++ and embedded software development principles.
Experience developing application-level software for embedded systems.
Strong understanding of authentication, authorization, cryptography, PKI, certificates, secure communications protocols, and secure software development practices, with demonstrated experience implementing these capabilities in embedded systems.
Familiarity with IEC 62443, IEC 81001-5-1, FDA cybersecurity guidance, or other secure product development frameworks.
Background in unit and component testing using modern frameworks, such as Catch and PyTest.
Skilled in developing technical solutions to complex problems that require analysis, problem solving, and creativity.
Experience with embedded operating systems, preferably VxWorks and Linux, and tools used to build operating systems and associated applications, such as CMake, Yocto, and/or Buildroot.
Ability to evaluate, adopt, and leverage emerging AI technologies to improve developer productivity, software quality, and business outcomes.
Ability to work beyond routine tasks by applying specialized knowledge and technologies.
Self-motivated and team-oriented, with a positive attitude, vision, growth mindset, and willingness to learn new technologies and approaches.
Demonstrated ability to communicate effectively, both verbally and in writing.
Strong collaboration and technical leadership skills, with the ability to influence cross-functional teams, align priorities, and drive issue resolution.

Nice To Haves

Experience implementing TLS, secure communications protocols, certificate management, or cryptographic libraries.
Experience with secure boot, code signing, firmware integrity validation, or secure software update mechanisms.
Familiarity with threat modeling methodologies
CSSLP, Security+, or similar technical cybersecurity credentials.
Experience implementing AI-assisted developer tools, coding assistants, or workflow automation
Experience working within regulated product development environments.

Responsibilities

Design and implement software solutions that address cybersecurity requirements while balancing product functionality, performance, reliability, and maintainability.
Implement secure communications, authentication, authorization, certificate management, and cryptographic capabilities within products.
Own implementation and maintenance of secure boot, secure update, software integrity, and trusted execution capabilities.
Apply secure software development lifecycle (Secure SDLC) practices throughout design, implementation, verification, and post-market support activities.
Collaborate with Product Security and R&D Cybersecurity teams to translate cybersecurity requirements into product implementations.
Investigate, analyze, and remediate software vulnerabilities and cybersecurity findings.
Contribute technical content to cybersecurity design documentation, evidence packages, and engineering deliverables.
Lead or contribute to cybersecurity architecture reviews, secure code reviews, secure coding standards and threat modeling activities for assigned product areas.
Support integration and use of software assurance tools including static analysis, software composition analysis, and vulnerability scanning.
Support investigation and resolution of software defects, system issues, and cybersecurity findings identified by customers, testing activities, or internal engineering teams.
Develop and maintain safety-critical, real-time software, including device drivers and networking stacks.
Coordinate technical activities, provide status updates, and ensure timely delivery of software features.
Collaborate with application engineers to define and implement application-embedded software interfaces.
Collaborate with hardware engineers to define and implement hardware-software interfaces.
Debug system-level issues using appropriate diagnostic tools and troubleshooting methods.
Create and maintain automated testing frameworks.
Develop technical documentation for software architecture and APIs.
Participate in design reviews and maintain coding standards.
Troubleshoot and resolve product field issues.
Monitor system performance metrics and identify opportunities for improvement.