Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff Firmware Engineer, Platform Security

Home > C/C++ programming jobs

Staff Firmware Engineer, Platform Security in USA new

  • Palo Alto, CA

Responsibilities

  • Define secure boot architecture across MCU families, including image signing, verification, anti-rollback, and production debug/JTAG lockdown.
  • Own on-device and fleet key strategies, key hierarchies, and HSM/OTP/secure-element integration with signing and PKI services.
  • Lead CAN/CAN-FD network security, including authentication, integrity, encryption, protected diagnostics, and secure UDS access.
  • Own end-to-end firmware update trust, including signed and encrypted payloads, on-device verification, rollback safety, and cloud-to-vehicle handoff.
  • Architect reusable security libraries and APIs for cryptographic wrappers, secure storage, and authentication services.
  • Lead threat modeling and hardening across boot, update, and network attack surfaces.
  • Drive security testing through benchtop proofs of concept, negative tests, hardware-in-the-loop scenarios, and CI checks.
  • Partner with firmware, cloud, manufacturing, and systems teams on requirements, production readiness, and trade-offs.
  • Mentor engineers and provide design leadership across the organization.

Requirements

  • 8+ years of embedded software or firmware development experience with deep ownership of secure boot, cryptography, or vehicle/IoT security architecture.
  • Proven experience setting technical direction across multiple ECUs or products.
  • BS in an engineering discipline, preferably Computer Science or Electrical Engineering.
  • Hands-on expertise with AES, ECC/RSA, HMAC, certificates, key provisioning, OTP/fuse programming, and HSM or secure element usage in production.
  • Experience designing and shipping secure boot chains, bootloaders, signed firmware images, and OTA trust models in production.
  • Vehicle or industrial network security experience, including CAN/CAN-FD, authenticated messaging, and secure diagnostics, is preferred.
  • Expert-level C/C++ experience on bare-metal or RTOS platforms, with familiarity with linkers, memory maps, and JTAG/SWD debugging tools.
  • Ability to integrate signing and verification into CI and release pipelines and drive platform-wide adoption.
  • Strong communication, documentation, threat-modeling, runbook, and engineering mentorship skills.
  • Hardware-in-the-loop testing and emulation experience is preferred.

Benefits

  • Health, dental, and vision insurance covered up to 100% with FSA and HSA options.
  • One Medical membership and dedicated insurance advocates.
  • Fertility and family-building benefits through Progyny.
  • Flexible time off.
  • 401(k) match.
  • Located in Silicon Valley.

Salary: $200k - $240k/yr

ALSO

We’re ALSO, an electric mobility company on a mission to build the world’s best small vehicles for moving people and goods, driven and autonomous. Originally incubated within Rivian, we’re rethinking transportation from first principles to create a new generation of smaller, smarter, and more con...

Similar positions

New Graduate Engineer, Software

  • SpaceX
  • Full time
  • USA
  • 08/16/2026
  • Salary: $125k - $200k/yr
  • Redmond, WA

Staff Software Engineer (Clinical & Installations)

  • Henry Schein One
  • Full time
  • USA
  • 08/16/2026
  • Salary: $150k-$165k
  • Remote

New Graduate Engineer, Software

  • SpaceX
  • Full time
  • USA
  • 08/16/2026
  • Salary: $135k - $210k/yr
  • Palo Alto, CA

Sr. Security Engineer

  • Brave
  • Full time
  • USA
  • 08/15/2026
  • Remote

Senior ML Engineer, GenAI - Games

  • Netflix
  • Full time
  • USA
  • 08/15/2026
  • Salary: $466k-$750k
  • Remote