Senior Security Engineer, RTOS, Virtualization

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Oversee security engineering for RTOS, hypervisor, and embedded virtualization technologies throughout the design, implementation, review, and verification phases.

• Collaborate on CPU and SoC architectures, addressing aspects like privilege levels, memory protection, DMA, interrupts, boot flows, debug controls, and hardware isolation.

• Develop and implement protective features such as robust partitioning, least-privilege access, secure communication, fault containment, secure updates, and recovery from malicious inputs.

• Conduct threat modeling and automotive TARA assessments.

• Link risks, mitigations, requirements, tests, and evidence to security and safety standards.

• Review low-level C/C++ code for security vulnerabilities.

• Investigate potential security vulnerabilities.

• Construct fuzzing and security testing infrastructure.

• Propel security fixes into production environments.

⛳️ Requirements

• 8+ years of practical experience in systems, embedded, platform, product, or automotive security.

• A degree in BSEE/BSCS or equivalent experience.

• Proven experience securing RTOS, hypervisors, kernels, firmware, boot processes, drivers, or other privileged software.

• Proficient in C/C++ with an emphasis on memory safety, concurrency, resource ownership, privilege boundaries, and isolation.

• Knowledge of CPU and SoC security concepts, including MMU/SMMU or IOMMU, DMA, interrupts, boot processes, debugging, and hardware-backed isolation.

• Experience with threat modeling, vulnerability analysis, exploitability assessments, fuzzing, static or dynamic analysis, and security remediation.

• Familiarity with automotive cybersecurity, safety, or process standards such as ISO/SAE 21434, UN R155, ISO 26262 interfaces, or Automotive SPICE.

• Promoted the use of Rust, Ada/SPARK, formal methods, or other memory-safe and analyzable system approaches.

• Developed capability-based or ownership-based security models for low-level systems.

• Created security automation, fuzzing infrastructure, review agents, or AI-assisted tools utilized by engineering teams.

🏝️ Benefits

• Equity

• Benefits

• Inclusive work environment

• Equal opportunity employer