Embedded Linux Security Engineer (Remote)

About the role

Join a global technology leader as an Embedded Linux Security Engineer. You will focus on building Secure Boot architectures, hardening storage, and implementing trusted execution environments on embedded Linux platforms.

Key responsibilities

• Design and implement Secure Boot from hardware root of trust through the kernel.
• Harden the Linux storage stack using dm-verity and dm-crypt.
• Deploy a Trusted Execution Environment (TEE) and author trusted applications with OP‑TEE.
• Enforce user‑space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines within CI/CD workflows.

Required profile

• 5+ years of embedded Linux engineering with a security focus.
• Proven experience designing hardware root of trust and Secure Boot, including U‑Boot Verified Boot.
• Hands‑on experience with board bring‑up, BSP customization, and Yocto.
• Strong C programming skills and scripting in Python or Bash.
• Advanced proficiency in English.

Required skills

• Embedded Linux, dm‑verity, dm‑crypt, ARM TrustZone (EL1‑EL3).
• U‑Boot, Yocto, OP‑TEE.
• C, Python, Bash.
• SELinux, AppArmor, cgroups, namespaces, seccomp (nice to have).
• GitLab CI / GitHub Actions, HSM, Key Vault (nice to have).
• Cryptography fundamentals: asymmetric crypto, SHA‑256/384, PKI.

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave.