Senior Embedded Security Test Engineer Job at Sigma Software Group

Senior Embedded Software Engineer - OpenBMC & Firmware Security

This role has been designed as ‘Hybrid’ with an expectation that you will work o...

Location

India , Bengaluru

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in computer science, Computer Engineering, Information Systems, or equivalent
Typically, 10-20 years experience
At least 5 years of experience developing for OpenBMC
firmware security experience - firmware security risk assessments, vulnerability management, ability to identify and mitigate firmware/software supply chain risks, etc
Expertise with multiple software systems design tools and languages. (C, C++, python, and GO are frequently used)
Linux development
RESTful API
Strong assessment and problem-solving skills
Designing software systems running on multiple platform types
Software systems testing methodology, including writing and execution of test plans, debugging, and testing scripts and tools

Job Responsibility

Designs enhancements, updates, and programming changes for OpenBMC and other systems software, including networking, drivers, interfaces, and tools
Assesses design and assesses coding, programming, and integration activities required based on general goals and knowledge of overall architecture of product or solution
Writes and executes complete test plans, protocols, and documentation for assigned portion of application
identifies, debugs, and creates solutions for issues with code and integration with application architecture
Oversees a project team of other software system engineers, and development partners, to develop reliable, cost effective and high-quality solutions for assigned subsystem
Collaborates and communicates with management, internal, and outsourced development partners regarding software system design status, project progress, and issue resolution
Represents the system software engineering team for all phases of larger and more-complex development projects
Provides guidance and mentoring to less-experienced staff members

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Senior Security Engineer, Security Operations

The senior security engineer role provides a unique opportunity to shape the sec...

Location

United States , REMOTE; SAN FRANCISCO; ROSEVILLE; LEHI; WEST PALM BEACH; IRVINE

Salary:

146000.00 - 170000.00 USD / Year

GoodLeap

Expiration Date

Until further notice

Requirements

Strong communicator with the ability to lead technical architecture discussions, drive technical decisions, and effectively communicate with non-technical audiences
Expertise in security event management, monitoring, threat hunting, incident response, playbook creation, orchestration/automations
Experience with threat modeling methodologies
Expertise with EDR solutions/platforms, such as CrowdStrike, S1, Palo Alto Cortex EDR
Experience with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, and IAM (knowledge of GCP and/or Azure is a plus)
Proven ability to establish credibility and build trust with business, engineers, and operational staff
Experience designing, configuring, and implementing security and fraud monitoring for core enterprise systems, e.g., ERP, HCM, Salesforce
Experience working with and creating solutions based AI and ML toolsets – e.g., creation of AI skills, agents, MCP clients, vibe coding
Strong understanding of both human and non-human identity management and common enterprise and consumer authentication standards and use cases
Practical experience with CI/CD pipelines and DevOps tools, including Infrastructure-as-Code (IaC) tools like Terraform, Pulumi, or CDK

Job Responsibility

Lead, participate in, and contribute to security and fraud monitoring, detection, and response activities, inclusive of investigations, threat hunting,etc. Create playbooks for specific incident response scenarios
Identify potential misuse and abuse cases in enterprise systems, propose solutions to detect these scenarios, and identify and implement monitoring and detection solutions for such scenarios
Support or develop components of the security analytics platform
Support embedded (product) security team
Support general security operations team with vulnerability management, tools management, and more

What we offer

bonus
equity

Fulltime

Senior Security Engineer, Application Security

We are hiring a Senior Application Security Engineer to join Turnkey's team and ...

Location

Salary:

Not provided

Turnkey

Expiration Date

Until further notice

Requirements

Bachelors degree in Computer Science, Engineering, or a related field
5+ years of experience in application or product security, ideally in fast-moving, high-impact or crypto-native environments
Strong understanding of web, mobile, and cryptographic security fundamentals (e.g. OWASP Top Ten, SANS/CWE Top 25)
Proficiency in programming and scripting languages (Typescript/Javascript, Go, Rust) and experience building secure systems from the code up
Hands-on experience with security testing tools and methodologies (static/dynamic analysis, pen testing, etc.)
Strong understanding of cloud, containerized, and runtime environments (AWS, GCP, Docker, Kubernetes), with the ability to embed security early in the SDLC
Excellent analytical, problem-solving, and communication skills, with a collaborative mindset for partnering across product and infrastructure teams
Curious, proactive, and passionate about building secure, reliable systems in a fast moving startup environment
A builder mentality
comfortable operating with ambiguity, tackling incomplete systems, and applying hands-on engineering experience to security challenges.

Job Responsibility

Partner with Product and Engineering at both the design and development stage to ensure that we implement new features securely, including (but not limited to): Participating in the implementation efforts
Doing security reviews
Helping with product design decisions
Auditing and surfacing vulnerabilities in our current products
Conducting threat modeling and security assessments for new features and systems, identifying risks early and shaping secure architectural decisions
Developing and improving our Automated Tooling: further enhancing our automated tooling to scale our product security capabilities and find potential code problems both before and after we deploy
Making the safe way, the easy way: work on defining and building application guardrails so that developers can build securely by default
Investigating and remediating security issues, including vulnerabilities and incidents, and drive long-term improvements to prevent recurrence
Embedding a culture of secure development across engineering, defining practices that influence how Turnkey builds, deploys, and maintains systems at scale.

What we offer

Full benefits, including medical, dental, vision, life, disability, HSA/FSA, 401(k)
Paid parental leave
Unlimited PTO
$3,000/yr learning and development budget to attend industry conferences
Multiple team offsites per year
Macbook Pro laptop
Lunch stipend (for those physically in the New York City office)

Fulltime

Senior Security Software Engineer - Security Operations

The Role GM’s Cybersecurity Team safeguards the company’s global information ass...

Location

United States , Warren

Salary:

125200.00 - 158600.00 USD / Year

General Motors

Expiration Date

Until further notice

Requirements

5-7 years in software security engineering
advanced proficiency in modern programming languages
Expert in API development, microservices, event streaming, and idempotent integration patterns
Experience deploying software using any modern CI/CD pipeline and automated delivery practices
Hands-on with security tooling integrations (e.g., SIEM, EDR, SSPM)
Proven AI integration experience: LLM agents, embeddings, vector databases, RAG, prompt engineering
Cloud proficiency (Azure/AWS/GCP) and IaC (Terraform/Bicep/ARM/CloudFormation)
Data engineering fluency: ETL/ELT, schema design, normalization/enrichment
formats (JSON, YAML, syslog, STIX/TAXII)
Excellent cross-functional communication

Job Responsibility

Own architecture & delivery for complex integration services (APIs, microservices, event-driven workflows) with production SLIs/SLOs
Build AI-driven workflows (RAG, summarization, classification, agents) that augment investigations, triage, and orchestration
Create reusable connectors bridging SIEM/EDR/IAM/SSPM/ITDR/ITSM and cloud telemetry with robust error handling, retries, and DLQs
Implement security automation (SOAR-like playbooks) that enrich alerts and trigger deterministic + AI-assisted responses
Harden and observe services with CI/CD, automated testing, performance profiling, metrics, and incident runbooks
Mentor engineers and lead technical design reviews, coding standards, and reference implementations
Translate requirements into clear epics/roadmaps
align stakeholders and deliver on time with quality

What we offer

medical
dental
vision
Health Savings Account
Flexible Spending Accounts
retirement savings plan
sickness and accident benefits
life insurance
paid vacation & holidays
incentive pay program based on company, job level, and individual performance

Fulltime

Senior Embedded Engineer

We are seeking a hands-on Senior Embedded Engineer with 5-8 years of experience ...

Location

India , Bangalore South

Salary:

Not provided

Wissen

Expiration Date

Until further notice

Requirements

5-8 years of experience in embedded systems development
Strong hands-on experience with ESP32 or similar microcontrollers
Strong programming expertise in C/C++
Experience with FreeRTOS or similar real-time operating systems
Understanding of multithreading, memory management, and concurrency
Strong knowledge of MQTT protocol, TCP/IP networking, and TLS/SSL security
Hands-on experience with serial protocols: UART, RS232/RS485, GPIO, SPI, I2C
Ability to interface with industrial devices and field hardware
Experience working on production-grade embedded devices
Strong problem-solving and debugging abilities

Job Responsibility

Develop and maintain ESP32 firmware using C/C++
Build drivers and interfaces for fuel dispensers, tank gauges, sensors, and controllers
Ensure firmware stability under challenging field conditions (network drops, power issues)
Implement MQTT-based publish/subscribe communication with cloud microservices
Design efficient MQTT topics, payload formats, retry and reconnect logic
Manage Wi-Fi/Ethernet connectivity, TLS security, and offline/online states
Ensure real-time performance, low latency control, and system reliability
Handle concurrency, multi threading, RTOS tasks, watchdog timers, and fault recovery
Diagnose and troubleshoot issues in live field devices
Participate in onsite testing at petrol pump sites

Fulltime

Senior Security Engineer – Medical Device Cybersecurity & Compliance

Job Description: Senior Security Engineer – Medical Device Cybersecurity & Compl...

Location

India , Ahmedabad

Salary:

Not provided

Arrow Electronics

Expiration Date

Until further notice

Requirements

Minimum of 6 years of experience in cybersecurity
At least 3 years focused on medical devices, embedded systems, or IoT security
Proven track record in authoring security design, defining technical requirements, and documenting security architectures aligned with regulatory needs
Hands-on experience in embedded system security including secure boot, firmware security, threat modeling techniques (e.g., STRIDE, DREAD), and product-level risk assessments
Strong understanding of IEC 81001-5-1, IEC 60601-4-5, AAMI TIR 57, and AAMI TIR 97
Working knowledge of the medical device product development lifecycle and quality standards like ISO 14971
Demonstrated expertise in vulnerability management and penetration testing of connected products across device and cloud ecosystems
Excellent problem-solving skills, critical thinking, and ability to lead gap analysis and remediation activities in regulated environments
Strong collaboration skills with the ability to influence cross-functional teams including R&D, compliance, and product management

Job Responsibility

Drive end-to-end cybersecurity integration across the medical device product development life cycle
Develop and maintain cybersecurity for medical products, including security requirements specifications, risk assessments, threat models, and product security architecture documentation
Conduct thorough gap assessments to evaluate compliance with IEC 81001-5-1, IEC 60601-4-5, AAMI TIR 57, and AAMI TIR 97 standards, and implement remediation measures
Perform hands-on vulnerability assessments, penetration testing, and secure code reviews of embedded devices, IoMT components, and connected systems
Collaborate closely with development, compliance, and regulatory teams to ensure product security measures meet both internal security policies and external regulatory expectations
Support SBOM management, software supply chain risk evaluations, and third-party component analysis
Provide expert input on secure communication protocols, encryption standards, data protection for both at-rest and in-transit data, and cloud-based connectivity of medical systems
Assist in developing incident response strategies
Contribute to the continuous enhancement of internal secure development processes, tools, and methodologies, while championing security best practices within product teams

Fulltime

Senior Test Engineer

Microsoft Silicon, Cloud Hardware, and Infrastructure Engineering (SCHIE) is the...

Location

United States , Hillsboro

Salary:

119800.00 - 234700.00 USD / Year

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Doctorate in Electrical Engineering, Computer Engineering, Computer Science, or related field AND 1+ year(s) technical engineering experience
Master's Degree in Electrical Engineering, Computer Engineering, Computer Science, or related field AND 4+ years technical engineering experience
Bachelor's Degree in Electrical Engineering, Computer Engineering, Computer Science, or related field AND 5+ years technical engineering experience
Ability to meet Microsoft, customer and/or government security screening requirements
This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter
This role will require access to information that is controlled for export under export control regulations
As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their US. residency or other protected status
To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport

Job Responsibility

Responsible for product and engineering activities supporting new product development and manufacturing, with primary focus on memory test
Contribute to silicon bring-up, validation, and manufacturing readiness while working closely with cross-functional partners
Support semiconductor IC development across fabrication, manufacturing test, and packaging phases
Contribute to ATE test program development, including test method implementation, test bring-up, silicon characterization, debug, and yield analysis for embedded memories
Execute defined test plans and methodologies while identifying issues and escalating risks with clear technical data
Apply working knowledge of Design-for-Test (DFT), silicon fabrication processes, product qualification and reliability, and basic transistor theory
Collaborate with design, DFT, product, and manufacturing teams to support memory test readiness and issue resolution
Gain exposure to product domains such as high-performance computing, AI, GPUs, and telecom, as applicable to assigned projects
Apply industry-standard DFT features, including Memory BIST, JTAG, and at-speed testing
Support Memory BIST test content generation, pre-silicon validation, and post-silicon debug activities

Fulltime

Senior Security Engineer

We’re looking for a Senior Security Engineer to join our Security team in Helsin...

Location

Finland , Helsinki

Salary:

Not provided

Supermetrics

Expiration Date

Until further notice

Requirements

3+ years of full-time experience in information security and in total at least 5 years of full-time work experience in e.g. software development
Expertise in securing cloud infrastructure in AWS, GCP or Azure
Basic knowledge of Kubernetes and securing Kubernetes clusters and containerized applications
Software development experience, including proficiency in at least one programming language (e.g., Python, Go, PHP) and understanding of secure coding practices, is required
Experience reviewing source code is also required
Experience of modern CI / CD systems (GitLab / GitHub) and implementing automated security scanning tools (SAST, SCA etc) as part of pipelines
Knowledge of security frameworks and standards such as OWASP ASVS, OWASP SAMM, ISO 27001, and CIS Benchmarks, and applying them to product development
Keen interest in promoting security in a product development organization and working in close collaboration with software and cloud engineers to improve security of our products

Job Responsibility

Work closely with product development to embed security best practices across the entire software development lifecycle and ensure security of our products
In collaboration with the cloud infrastructure team improve security of our cloud infrastructure by improving existing and implementing new security controls
Have a high level of autonomy in your daily work to improve our security posture
Security Engineering & Architecture: Design, implement, and maintain security controls across our SaaS platform and internal infrastructure. This includes automating vulnerability and threat detection (SAST, SCA, IAC, container image analysis), ensuring robust audit logging via SIEM, implementing and managing IAM policies, and continuously identifying and mitigating security risks
Reviews and Assessments: Do internal reviews, threat modeling and testing of new product features. Use automated tools and manual code review to find security issues in software and infrastructure
Collaboration & Communication: Collaborate closely with development and operations teams to integrate security into the Software Development Life Cycle (DevSecOps). Champion a security-first culture, embedding security principles into all aspects of our operations and product development
Security Automation: Improve our existing security tooling in CI / CD and add new tools. Implement automated threat detection and policy-as-code solutions to detect possible data breaches and insecure configurations

What we offer

Attractive pay structure, including equity
Great work equipment, and home office allowance for those working in our fully remote locations
Annual personal learning budget
Sports and wellness allowance

Fulltime

Select Country

Senior Embedded Security Test Engineer

Job Description

Requirements

What we offer

Looking for more opportunities?