Senior Embedded Security Engineer

at  ResMed

We are seeking a strategic and experienced Senior Embedded Security Engineer to join our team. This role will lead our efforts in designing, implementing, and managing secure architectures and solutions for medical devices.

LET’S TALK ABOUT QUALIFICATIONS:

• Bachelor’s or Master’s Degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field.
• At least 7 years of experience in hardware security engineering, with a focus on embedded systems and device security.
• Deep understanding of cryptographic principles and their application in hardware security
• Experience with security vulnerability assessment tools
• Proficiency in secure boot processes, secure firmware updates, and hardware roots of trust
• Knowledge in real time embedded device development
• Broad knowledge of IoT devices, network and interfacing protocols. Good working knowledge of Cellular, Wi-Fi, BT, and other related network technologies.
• Familiarity with control, storage and data transmission schemes to and from a large IoT fleet.
• Deep knowledge of key security protocols, with the ability to adopt and specify for implementation to engineering teams.
• Understanding of C/C++ development in constrained RTOS environments is desirable, but not mandatory.
• Relevant certifications such as CISSP, CISM, or CISA are preferred.

• Identify security requirements relevant for device hardware and embedded software while ensuring their correct implementation
• Support technical leaders in forming strategies for IoT fleet cybersecurity management and help support development teams in implementation for devices and the broader ecosystem
• Assess devices and systems for vulnerabilities and articulate risk to software leadership, including comprehensive threat models
• Perform security audits and code reviews for embedded device software
• Lead the development of secure coding standards for embedded systems, and support software teams in adhering to other established security policies and standards
• Stay abreast of the latest security technologies, trends, and threats to continually enhance the security posture of devices and systems
• Lead training and workshops to increase security awareness and skill within the engineering team
• Participate in incident response activities related to embedded device software systems