Principal Embedded Security Vulnerability Analyst

About the role

We are looking for a Principal Embedded Security Vulnerability Analyst to lead deep technical analysis of embedded systems. You will drive discovery and assessment of complex vulnerabilities in firmware, boot code, and security‑critical components, shaping the security architecture of next‑generation products.

Key responsibilities

• Lead in‑depth vulnerability analysis of embedded software (bare‑metal, RTOS, trusted execution environments).
• Analyze boot flows, privilege boundaries, crypto libraries, key handling and isolation mechanisms.
• Own root‑cause analysis, assess exploitability and systemic impact of identified weaknesses.
• Define security evaluation strategies for certifications such as PSA, SESIP and Common Criteria.
• Lead PSIRT incident analysis and drive architectural improvements.
• Architect and develop advanced analysis tooling (static analysis, fuzzing, automation frameworks).
• Define and scale AI‑assisted techniques (LLM‑based and agentic workflows) for code analysis and vulnerability discovery.
• Design hybrid workflows that combine traditional static/dynamic analysis with AI assistance.
• Mentor engineers in vulnerability research and influence product‑team decisions.

Required profile

• Degree in Electrical Engineering, Computer Science, Mathematics or related field, or equivalent practical experience.
• Deep understanding of low‑level system behavior (memory layout, interrupts, privilege levels, concurrency).
• Extensive experience in C programming and strong familiarity with ARM and/or RISC‑V architectures.
• Strong experience with assembly‑level debugging and low‑level system analysis.
• Proven track record in vulnerability research, reverse engineering or exploit development.

Required skills

• C programming
• ARM architecture
• RISC‑V architecture
• Assembly‑level debugging
• Static analysis tools
• Dynamic analysis / fuzzing
• Symbolic execution
• AI‑assisted (LLM‑based) code analysis
• Security certifications knowledge (PSA, SESIP, Common Criteria)