Embedded Security Engineer

Job description

Company Overview

Sigma Connectivity is a design house. We are a team of 700 talented engineers and our main office is located in Lund, Southern Sweden. Primarily we run in-house projects focusing on connected products within consumer electronics and IoT devices and we have the capability in terms of people, expertise and labs to realize the most demanding products on the market. We have offices in Sweden, US, Poland, Germany and Denmark. As a fast-growing company we are constantly looking for open-minded, talented people who want to take part in our journey. The Sigma Connectivity company culture is about sharing experiences and knowledge and with a Nordic work culture we strive for work-life balance and taking care of people. Within Sigma Connectivity you will never work alone.

Job Overview

We are seeking an embedded security engineer in Lund!

The role requires experience in embedded Android system architecture from a security perspective as well as implementation. You will work in close collaboration with developers, software and hardware architects as well as customer. The work consists of defining and implementing the security aspect of our projects.

We interview continuously for this position as we have multiple positions to fill!

Role and Responsibility

With a focus on hardware devices entire technology stack up to the edge of the cloud.

• Stay up to date on the current threat level
• Understand and assess various kinds of threats.
• Carry out threat and risk analyses.
• Systematically develop security concepts and protocols.
• Practically implement security solutions.
• Assess the efficiency of the security solutions developed

Basic qualifications

To succeed in this role you must have:

• Capability of translating security issues at the technical level.
• Experience in Android security features (including factory reset protection, HW crypto acceleration, keystore)
• Experience in secure and verified boot (including SFS anti-rollback, integrity verification with dm-verity and kernel modules signing)
• Advanced skills in one or several of: embedded C, C++, Java, Kotlin
• Knowledge within secure provisioning
• Development tools like Git, Gerrit, Jenkins, Coverity
• A good theoretical knowledge of cryptography
• Experience in mitigating and planning for OWASP top 10

Preferred additional skills, personal traits, experience

Preferred Qualifications

• Knowledgeable about the upcomming Cyber Security part of CE/RED and ETSI EN 303 645
• SELinux/SEAndroid
• Secure Payment with QPay/NFC and Google Pay
• Full disk encryption (FDE) or file-based encryption (FBE)
• Fuzzing embedded systems
• Able to implement cryptographic mechanisms using dedicated software libraries (e.g. : Mocana, mbedTLS and wolfSSL)
• Identify and integrate security solutions into products, for example PKI/HSM architectures
• Use secure elements offered by different suppliers of electronic components (e.g. : Infineon, STMicroelectronics or NXP) and integrate them with embedded cryptographic libraries.
• Experience with automated (re)validation with CTS and GTS
• Qualcomm TEE
• Strong documentation and writing skills

Technologies: ASLR, NX, ProPolice, safe_iop, OpenBSD dlmalloc/calloc, and Linux mmap_min_addr

Personal characteristics

• Team player
• Proactiveness in collaborating and execution.
• Willingness to learn new methods / tools / processes
• Strong problem solving and critical thinking skills
• Strong passion for creativity and solving cutting edge industry problems

We offer

• An international working environment
• Opportunity to develop cutting edge technology for market leaders and some of the most demanding customers
• Extensive hardware and software knowledge and all the equipment to build and test complete products and solutions
• Working on a project basis, promoting competence development
• At occasions, working on-site with the customer
• Being part of a wonderful and experienced team where you will never work alone.
• The Sigma Connectivity company culture.