Senior Embedded Security Engineer

SPAN

Senior embedded security engineer securing SPAN hardware products that electrify buildings and reduce carbon emissions. Designing cryptography, secure boot, OTA updates, device identity, and hardened Linux systems.

Posted 8/6/2026full-timeRemote • California • 🇺🇸 United StatesSenior💰 $138,000 - $184,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting and developing security infrastructure, including cryptographic services and secure boot flows, while ensuring device integrity and firmware security. Proficient in embedded systems engineering and operating system security, with a strong focus on applied cryptography and secure provisioning protocols.

Highest-signal resume keywords

Hardware SecurityEmbedded Systems EngineeringC/C++ ProgrammingTPM and HSM ConfigurationOperating System Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cryptographic ServicesSecure Boot FlowsFirmware SecurityBare-Metal Embedded Systems DevelopmentOS-Level HardeningApplied CryptographySecure Debug ArchitecturesOTA Update Systems DesignLinux Distribution ConfigurationVulnerability Mitigation

Tools & Technologies

HSMTPMYocto LinuxJTAGSWDUART

Industry Keywords

Security InfrastructureDevice IntegrityRoot-of-Trust ArchitecturesSecurity Provisioning ProtocolsCryptographic SigningAnti-Rollback Protections

Tech Stack

Tools & technologies

LinuxPythonRust

About the role

Key responsibilities & impact

Architect and develop robust security infrastructure, including cryptographic services and other security-critical components
Implement secure and authenticated boot flows to ensure device and firmware integrity from power-on
Design and secure Over-the-Air (OTA) update systems with encryption, cryptographic signing, authentication, and anti-rollback protections
Design and integrate security provisioning protocols into the factory manufacturing process
Establish secure device identities and root-of-trust architectures using onboard HSMs/TPMs
Design and implement secure debug architectures for JTAG, SWD, UART, and other physical/logical interfaces
Harden Linux and POSIX-based operating systems to minimize attack surfaces and secure the software stack
Rapidly prototype security features, identify vulnerabilities, design mitigations, and test continuous security improvements

Requirements

What you’ll need

6+ years of professional experience in hardware security, embedded systems engineering, or a closely related field
Advanced hands-on experience configuring and deploying TPMs and HSMs
Strong programming proficiency in C/C++, Rust, and Python
Experience designing, architecting, and implementing operating-system-level security solutions
Core expertise in bare-metal embedded systems development and firmware security
Familiarity with building and configuring custom Linux distributions using Yocto Linux
Skills in applied cryptography and cryptographic service infrastructure
Experience with operating system security and OS-level hardening
Experience with secure/authenticated boot flows

Benefits

Comp & perks

Competitive compensation + equity grants at a well-funded, venture-backed company
100% employee premiums for base medical, dental, and vision plans, with options for additional coverage
Parental leave up to twenty four (24) weeks depending on eligibility
Comfortable, sunny office space located near BART and Caltrain public transit
Employee Resource Groups
Monthly social events
SPANcakes recognition breakfast
Lunch and learns
Flexible hours
One holiday per month
Flexible time off