Embedded Software Engineer

We are seeking an Embedded Software Engineer to join the research team. The mission of the research team is to discover how vehicle systems store and protect data and to develop extraction and analysis methods that power a collection of vehicle system forensic tools. These tools are used by organizations around the world to gather essential information and investigate critical incidents. This position is well suited to an engineer drawn to complex, undocumented systems who works effectively at the intersection of software and hardware. The successful candidate will analyze how embedded devices operate, recover data from protected or unfamiliar systems, and translate those findings into reliable capabilities our customers depend on. We evaluate candidates on demonstrated technical ability, and welcome strong engineers whether their expertise was built through formal education, professional experience, or the security research community.
Want to make an application Make sure your CV is up to date, then read the following job specs carefully before applying.
As an Embedded Software Engineer your responsibilities will be:Extract and analyze embedded firmware and operating system software from automotive systems to discover key artifacts such as data structures, storage formats, and protection mechanismsAccess embedded devices through hardware and debug interfaces to acquire firmware and memory, and recover data from locked, damaged, or protected devices using appropriate techniquesWork with embedded operating systems such as Linux, QNX and AndroidDefeat device protections such as secure boot, encryption, obtain ADB and root access to target systems, where required to complete analysisDecrypt and analyze encrypted SQL databases and proprietary storage formats to recover and interpret structured dataAnalyze recovered data to identify, correlate, and validate artifacts of interest, and document findings for downstream forensic useDevelop repeatable, forensically sound extraction and decoding methods and maintain clear documentation of methodologies, target hardware, and attack surfacesBuild automation to parse, decode, and validate recovered data at scaleMaintain a code repository in accordance with industry’s best practices as directed by leadershipCollaborate with engineers, analysts, and product managers to prioritize targets and move research into supported product capabilitiesAs a candidate, your essential skills, qualifications and experience need to include:At least 3 years of experience in embedded software, embedded systems, or embedded securityExperience performing binary analysis, including disassembly and decompilation, and reading assembly on embedded-class architecturesFamiliarity with Linux, QNX and xzbcwsv Android based embedded systems and how they store and protect dataHands-on hardware skills, including working with debug interfaces, board-level rework, and signal captureFamiliarity with embedded communication buses and the ability to observe and interpret device trafficProficiency in a scripting or programming language for building parsing and automation toolingSolid understanding of file systems, data encoding, encrypted SQL databases, and cryptographic and secure-boot conceptsStrong analytical and data analysis skills, with the ability to interpret, correlate, and validate data and work through undocumented systemsExperience maintaining code in a version-controlled repository following established best practicesClear communication skills, comfort working cross-functionally, and the ability to travel locally and internationally as needed