
Lead Firmware Security Engineer
- Pune, Maharashtra
- Permanent
- Full-time
- Work with geographically distributed stakeholder organizations to capture requirements and define firmware architecture for embedded systems.
- Create and maintain detailed documentation of firmware architecture, design, and code.
- Demonstrate a hands-on technical background with excellent C programming skills and embedded code development in compliance with coding standards and best practices.
- Develop low-level device drivers and work with microcontroller fundamentals (caches, buses, memory controllers, DMA, etc.).
- Perform complex system-level debugging and troubleshoot firmware-related issues throughout the development lifecycle.
- Design and implement firmware solutions that meet system requirements and specifications.
- Collaborate with hardware engineers, software developers, QA engineers, and cybersecurity teams to ensure cohesive and secure product development.
- Provide clear and concise technical documentation for both internal and external use.
- Develop and implement test strategies for firmware components.
- Ensure firmware security and compliance with IEC 62443 standards.
- Generate and manage Software Bill of Materials (SBOM) for all firmware components.
- Use tools like Black Duck and Coverity for static code analysis and open-source vulnerability scanning.
- Collaborate with SQA and cybersecurity teams to ensure the reliability, quality, and security of firmware.
- B.S. degree in Computer Science, Electronics Engineering, or a related field (or equivalent experience plus certifications).
- 8+ years of professional work experience in embedded software development.
- Proven experience as a Firmware Architect or in a similar role.
- Strong proficiency in embedded systems programming languages such as C and C++.
- In-depth knowledge of firmware development processes, tools, and methodologies.
- Experience with microcontroller and microprocessor-based systems.
- Familiarity with communication protocols (e.g., UART, SPI, I2C) and wireless technologies (e.g., Bluetooth, Wi-Fi).
- Hands-on experience with OT cybersecurity standards and practices, including:
- IEC 62443 compliance for secure product development.
- Software Bill of Materials (SBOM) generation and management.
- Use of Black Duck for open-source vulnerability scanning.
- Use of Coverity for static code analysis and defect detection.
- Understanding of secure boot, firmware signing, and secure update mechanisms.
- Excellent problem-solving and debugging skills.
- Strong communication and collaboration skills.
- Experience in system-level design is a plus.
- Experience with real-time operating systems (RTOS).
- Knowledge of security best practices for embedded systems.
- Familiarity with version control systems (e.g., Git) and issue tracking tools.
- Experience with Distributed Version Control (Mercurial, Git, or similar).
- Familiarity with Continuous Integration tools (TeamCity, Jenkins, or similar).
- Experience in developing/testing products with industrial protocols: HART, Foundation Fieldbus, Profibus, Industrial Ethernet.
- Hands-on experience with IEC 62443 compliance, SBOM generation, Black Duck, and Coverity for secure firmware development.