Embedded Security Engineer
Thistle Technolgies
Other Engineering
Remote
Posted on Dec 14, 2023
Thistle Technologies empowers developers to easily build security resilience into their products. Embedded devices face the same threats as servers and workstations but often without the modern security mitigations to match. Thistle Technologies makes it easy to incorporate robust resilient security functionality into devices with high-security requirements.
Responsibilities
- Take product concepts in device security from incubation to demonstration, and eventually to production
- Co-maintain existing product features in the Thistle Security Platform
- Design, develop, deploy and maintain new device security features to evolve and shape the Thistle Security Platform
- Collaborate closely with backend engineers, product, and business development. Support sales calls as needed
- Engage with open source and developer communities to advocate and demonstrate Thistle Security Platform's capabilities with respect to device security
Qualifications
- 8+ years of experience building and shipping production software in the embedded security area
- Professional experience of low-level embedded software development in C/C++ or Rust, also including ability to set up CI/CD pipelines for automated testing and deployment
- Interest in opportunities and challenges in a startup environment, with respect to product building
- Deep knowledge of hardware security mechanisms, in particular, secure boot, trusted execution environment, inter-processor communications, and debugging interfaces. Hands-on experience with them
- Deep knowledge of embedded firmware and operating system security principles
- Understanding of cryptography primitives for data authenticity and confidentiality, as well as implementation experience with respect to their applications under different circumstances.
- Familiarity with the concepts of PKI, secure communication, key derivation and key management.
- Fluency in conventional applied cryptography such as AES, hashing, ECC and RSA; basic knowledge of quantum-safe cryptography
- Software security experience, specifically, exploitation techniques in embedded systems, reverse engineering in firmware, and design and development of anti-exploitation countermeasures
Strong Pluses
- Experience in device key provisioning systems in a manufacturing environment
- Experience in manual or automated security testing of embedded systems
- Experience in manual and code-scanner assisted security code review and vulnerability triaging
- Experience in building code signing tools/systems using secure hardware, hardware security modules or Cloud-based key management systems
Thistle Technologies is a security company built for device makers. At Thistle, we write easy-to-use, easy-to-integrate, and reliable software to bring security to IoT devices. We are hiring a backend engineer to build the software that our customers use to manage and interact with hardware devices that they manufacture.
Who we are
• The Thistle team is a small, highly collaborative team that pulls together cross-functionally to reach our goals.
• We are confident that the most inclusive and diverse teams deliver the best results.
• We know that innovation requires execution, experimentation, novel ideas, and failure, so we're building a blame-less culture where everyone can contribute. And, while we know there are no perfect solutions, we're constantly working towards mastery and excellence.
• We help each other to do our best work by creating a high-trust team with space for autonomy & experimentation that proactively supports each other and shares knowledge openly.
How we work
• The future of work is our starting point, and we're excited to take advantage of this moment to transform the way we work.
• Thistle is a fully distributed team that's optimizing to work in a global environment. We're creating practices that enable us to do our best work from anywhere including great documentation, intentional community building, and agile business practices that respond to the changing world.
• We work 4 days a week to make time for everyone to put the LIFE back in work-life balance.
• We focus on results over hours, autonomy and enablement over controls, and growth and development over perfection to build engaged and empowered teams.
Benefits
• Competitive salary and equity
• Health, dental, and vision plan options with premium contribution from Thistle
• 401(k) plan
• Unlimited time-off policy
• 4-day work week
• Fully distributed and remote team
We are an equal-opportunity employer that values and welcomes diversity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.
All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
#LI-Remote