Security Research Engineer – Embedded Systems

CENSUS is seeking talented and ambitious Security Research Engineers to join their Product Security Professional Services team. The team conducts applied research to design, develop, and implement resilient cybersecurity solutions. As a Security Research Engineer, you will:

• Collaborate with clients’ development and security teams on long-term projects.
• Research the security maturity and capabilities of technologies, frameworks, protocols, and implementations related to platform security.
• Identify security inefficiencies, architecture/design defects, and vulnerabilities across technologies and products.
• Research and propose security architectures and align them with product security requirements.
• Document product security risks using both technical and business-oriented language.
• Execute security posture assessments using various auditing and testing methodologies.

CENSUS is an internationally acclaimed cybersecurity services provider, supporting the needs of multiple industries with IT and OT security services. They offer solutions to public and private organizations worldwide, including Fortune 500 companies, by leveraging cutting-edge research, scientific analysis, and extensive engineering experience.

Minimum Qualifications:

• MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering, or equivalent practical experience.
• 4+ years of experience in embedded system or firmware security, including roles in engineering, assessment, or consultancy.
• Proven experience of 2+ years in embedded systems or platform security research projects.
• Proficient in English with excellent communication skills.

Required Skills:

• In-depth exposure to Embedded Systems, Linux, or Real-Time Operating Systems security concepts.
• Experience with ARM architectures and platforms.
• Proficient in programming languages such as C, C++, Rust, or Assembly within the context of system firmware/software.
• Knowledge of reverse engineering, fuzz testing, and debugging methodologies.
• Familiarity with hardware-backed security features and secure boot technologies.
• Analytical thinking, ownership, problem-solving skills, and a willingness to learn and grow.

Nice-to-Have Skills:

• Familiarity with cryptographic primitives and best practices in the context of system security.
• Experience with edge & cloud confidential computing technologies and virtualization.
• Experience with RISC-V architectures and working with international teams across various time zones.