Embedded Linux Security Engineer - Remote Work

About the role

We are looking for an Embedded Linux Security Engineer to design and implement secure boot architectures, harden storage, and build trusted execution environments on embedded platforms. The role focuses on protecting the operating system as the primary attack surface, working remotely with a global team of top‑tier engineers.

Key responsibilities

• Design and implement Secure Boot architecture from hardware root of trust through the kernel.
• Harden the Linux storage stack using dm‑verity and dm‑crypt.
• Establish a Trusted Execution Environment and develop trusted applications within the Linux security model.
• Enforce user‑space sandboxing and access control mechanisms.
• Automate cryptographic signing pipelines in CI/CD integrated with a signing backend.

Required profile

• 5+ years of embedded Linux engineering with a security focus.
• Proven experience designing hardware root of trust and Secure Boot, including U‑Boot Verified Boot.
• Hands‑on experience with board bring‑up and BSP customization using Yocto.
• Background in TEE development and trusted application authoring using OP‑TEE.
• Strong C programming skills and proficiency in Python or Bash scripting.
• Advanced proficiency in English.

Required skills

• Embedded Linux security (dm‑verity, dm‑crypt, ARM TrustZone EL1‑EL3).
• Secure Boot, U‑Boot Verified Boot.
• Yocto Project.
• OP‑TEE and trusted application development.
• C programming.
• Python scripting.
• Bash scripting.

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software setup for home office.
• Flexible schedule.
• Paid parental leave, vacation and national holidays.
• Mentorship, promotions, skill development and multicultural environment.