Embedded Software Engineer – IoT Security
Location: Estonia (Tallinn)
Job Type: Remote
Role Overview
We are looking for a skilled Embedded Software Engineer to join our client's remote team based out of Tallinn, Estonia, with a focus on security for IoT systems. You will play a key role in designing and implementing secure embedded firmware for connected devices across various industries. This position is ideal for an engineer passionate about cybersecurity, embedded systems, and building trust into the IoT ecosystem from the ground up.
Core Skills
• Embedded C/C++ Development: Strong experience in writing efficient, low-level code for microcontrollers, with attention to performance and reliability.
• Secure Boot & Encryption: Practical knowledge of secure bootloaders, cryptographic libraries (e.g., mbedTLS, wolfSSL), and secure firmware updates (OTA).
• RTOS & Bare-Metal: Proficiency in developing with real-time operating systems or bare-metal for time-critical IoT applications.
• IoT Protocols: Familiarity with MQTT, CoAP, or LwM2M and secure data transmission (TLS, DTLS).
• Secure Element Integration: Experience working with secure elements (e.g., TPM, ATECC608A) and hardware-based key storage.
• Threat Modeling & Secure Design: Understanding of security best practices and experience designing systems with threat modeling in mind.
Preferred/Additional Skills
• Secure Firmware Updates: Knowledge of firmware over-the-air (FOTA) update mechanisms with rollback and verification.
• Embedded Linux Security: Familiarity with secure configurations and kernel hardening for embedded Linux platforms.
• Penetration Testing Tools: Exposure to tools for embedded device security auditing, such as JTAGulator, ChipWhisperer, or Bus Pirate.
• Public Key Infrastructure (PKI): Experience implementing or integrating certificate-based authentication.
• IoT Standards & Compliance: Awareness of IoT cybersecurity standards (e.g., ETSI EN 303 645, NIST IoT guidelines).
• Cross-Platform Development: Ability to develop firmware for various architectures (ARM Cortex-M, RISC-V, etc.) with secure build systems.