Cybersecurity Firmware Engineer
3 days ago
Canada
indie.inc
Full-time
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
By continuing, you agree to our Terms & Privacy Policy.
Imagine being part of a team that’s redefining the future of mobility—where your ideas don’t just sit in a lab but power next-generation technology. At indie, we are developing cutting-edge semiconductors, photonics, and radar sensors and systems for automotive, industrial, and adjacent markets. Our innovations are at the heart of advanced intelligent sensing and user experience applications, pushing the boundaries of what’s possible.
The Senior Cybersecurity Firmware Engineer is responsible for the security architecture and secure implementation of firmware running on indie’s SoCs. In this role, you will partner with firmware, hardware, and architecture teams to reduce risk, threats, and vulnerabilities, and to drive new security features into products that ship in millions of vehicles.
This role requires a self‑motivated engineer with strong problem‑solving skills who is equally comfortable in a threat model review and in a debugger, thrives in a collaborative team environment, and can provide technical leadership and mentorship across engineering teams.
Design, implement, and test the cybersecurity architecture of indie’s firmware
Perform security threat analysis and risk assessment (TARA) of firmware and embedded subsystems across indie’s product lines
Convert analysis findings into written, testable security requirements, and review designs and implementations against them
Support system bring‑up and debug customer systems and issues
Respond to customer cybersecurity requirements and questionnaires, and author cybersecurity architecture documents and application notes
Participate in code reviews and ensure compliance with automotive software quality standards, including MISRA guidelines
Bachelor’s degree in electrical engineering, computer engineering, computer science, or a related technical field
Minimum 5 years of experience in product security, cybersecurity firmware, or cybersecurity research, including hands‑on work with embedded firmware codebases
Strong C programming and debugging skills in RTOS environments
Familiarity with applied cryptography — secure boot, code signing, key derivation and management — together with threat modeling, common attack vectors, and mitigation techniques
Hands‑on experience with hardware security building blocks: hardware roots of trust, HSMs or crypto accelerators, secure key storage, and fuse/OTP-based provisioning in SoCs or ASICs
Working knowledge of Python for scripting and tooling, and hands‑on experience with OpenSSL
Excellent verbal and written communication, documentation, and presentation skills in English
Note: indie does not require Canadian work experience as a condition of employment.
Sc. or PhD in computer science, electrical engineering, or a related technical field
Experience applying ISO/SAE 21434 cybersecurity engineering in a production automotive program, including TARA and cybersecurity work products
Familiarity with automotive security standards and frameworks such as EVITA, SHE, AUTOSAR SecOC and Crypto Stack, UNECE R155/R156, and MISRA C coding guidelines
Familiarity with camera technologies, image and video processing pipelines, or computer vision applications
Experience with vulnerability handling and incident response for shipped embedded products
Ability to travel internationally without restriction
indie Semiconductor and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third‑party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law.
We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
Concerning agencies: indie Semiconductor does not accept unsolicited resumes and will not be responsible for fees related to such.
#