Embedded Security Expert

Do you love cutting-edge tech and are passionate about engineering? Then this opportunity might be perfect for you!

About DSR Corporation

DSR Corporation has been the ideal end-to-end solution provider for hundreds of companies, from startups to the Fortune 500, since 1998. Since then, DSR has blossomed into 11 technical divisions, with highly-skilled, technologically-agnostic engineering resources and services in full-stack web, embedded, mobile, wireless, big data / analytics, scalable databases, system software, digital media, SSI / blockchain, and AI / computer vision. Our fully-managed teams and deep technical expertise enable us to provide world-class custom software solutions of any scale and complexity. This approach has allowed us to serve industry leaders like Netflix, Nordic Semiconductor, Seagate, Legrand, EDF, Amazon, Sysgo, and many others. The company has offices located around the world including Denver, Porto, Voronezh, Yokohama-city, and Tashkent.

Among our own products are ZBOSS, the Zigbee software protocol stack for IoT devices, zHome framework for smart home solutions (mobile app, back-end, IoT gateway), ZBOSS Open Initiative to maintain and improve the market-leading Zigbee® PRO software platform together with heavyweight IoT market players. DSR's wholly-owned subsidiary, Noema, focuses on delivering the most up-to-date and reliable AI and Computer Vision solutions for security, manufacturing, retail, healthcare and smart homes/cities businesses.

Join our multinational team of seasoned software engineers! We're passionate about tackling complex tasks and sharing our unique software development expertise, accumulated over 25 years. With well-established workflows and transparent career paths, we're geared to boost your professional growth, regardless of your current experience level.

Let's change our world for the better by doing software right!

| | | |

We are currently looking for an experienced Embedded Security Expert to join our team in the journey of practical cyber security and to ensure the security and resilience of our embedded solutions. You will be involved in all stages of the software development lifecycle, focusing on identifying vulnerabilities, mitigating risks, and implementing secure coding practices across multiple platforms. You will collaborate closely with development teams to integrate security by design and respond to evolving cyber threats.

Responsibilities:

• Design, develop, and maintain secure embedded software/firmware in C/C++ for microcontrollers and microprocessors (ARM Cortex-M/A, MIPS, RISC-V, etc).
• Conduct threat modeling, security risk assessments, and vulnerability analysis for embedded systems throughout the product development lifecycle.
• Perform security assessments of embedded solutions, identifying vulnerabilities in design, code, and architecture.
• Work with development teams to implement secure coding practices, provide code reviews, and improve application security posture.
• Stay up-to-date with the latest security trends, exploits, and vulnerabilities, translating this knowledge into actionable improvements.
• Document security architecture, design decisions, and test results for internal and external stakeholders.

Requirements:

• MS (preferred) or BS degree in Computer Science or equivalent work experience
• 5+ years of experience in embedded systems development
• Expert proficiency in C/C++
• At least 1 year of experience in IoT/embedded security
• Deep understanding of RTOS (FreeRTOS, Zephyr, ThreadX), bootloaders (U-Boot, MCUboot), bare-metal development and Embedded Linux Booting process
• Experience with JTAG/SWD debugging, logic analyzers, oscilloscopes, and reading board schematics
• Strong knowledge of symmetric and asymmetric cryptography, PKI, key management, and secure element provisioning
• Familiarity with common embedded attack vectors and reverse engineering
• Excellent written and verbal English skills; ability to articulate complex security concepts to both technical and non-technical audiences
• Familiarity with SAST, DAST tools
• Strong problem-solving skills
• Technical leadership experience
• Experience working in distributed team
• Fluent English

Will be a Plus:

• Experience in hardware prototyping and soldering
• Experience with wireless networks: Zigbee, Wi-Fi, Bluetooth, Z-Wave, etc.
• Experience with hardware security techniques as Secure Boot, Trusted Execution Environment, Trusted Platform Modules, etc.
• Experience with IDA Pro, Ghidra, Radare2, Binary Ninja
• Experience with SAST and DAST tools
• Python or any other scripting languages
• Familiarity with cyber-security frameworks and standards
• Experience with web applications and services testing
• Technical leadership experience
• Unix-like systems administration
• Experience working in distributed team
• Fluent English

Skill Keywords:

• Embedded Systems Security
• Embedded Software Development
• C/C++
• Embedded Linux
• Threat Modeling
• Security Audit
• Penetration Testing
• Reverse Engineering

• Competitive salary and great benefits.
• Accelerated career growth.
• Flexible schedule.
• Office in the center of Tashkent.
• Strong work-life balance emphasis.
• Paid sick leave days.
• Free trainings for technical and soft skills.
• Language courses.
• Free licensed software.