Principal Embedded Security Vulnerability Analyst (m/f/d)

experienced security researchers

highly experienced embedded engineers with a demonstrated transition into security

Lead in-depth vulnerability analysis of embedded software (bare-metal, RTOS, trusted execution environments)

Drive analysis of boot flows, privilege boundaries, and security-critical components (e.g., crypto libraries, key handling, isolation mechanisms)

Own root cause analysis and assess exploitability and systemic impact of identified weaknesses

Define and guide security evaluation strategies for certifications (e.g., PSA, SESIP, Common Criteria)

Lead analysis of PSIRT incidents and drive structural and architectural improvements

Architect and develop advanced analysis methodologies and tooling (static analysis, fuzzing, automation frameworks)

Define and scale the use of AI-assisted techniques for code analysis and vulnerability discovery (e.g., LLM-based and agentic workflows)

Design and institutionalize workflows that combine traditional analysis (static/dynamic) with AI-assisted approaches

Evaluate and introduce emerging attack techniques and incorporate them into internal methodologies

Influence product teams and architecture decisions by translating findings into systemic mitigations

Mentor and guide other engineers in vulnerability analysis and research methodologies

Degree in Electrical Engineering, Computer Science, Mathematics, or related field, or equivalent practical experience

Deep understanding of low-level system behavior (memory layout, interrupts, privilege levels, concurrency)

Extensive experience in C programming; strong familiarity with ARM and/or RISC-V architectures

Strong experience with assembly-level debugging and low-level system analysis

Proven track record in vulnerability research, reverse engineering, or exploit development

Deep experience with static and dynamic analysis tools, fuzzing, or symbolic execution

Strong understanding of vulnerability classes (memory corruption, logic flaws, side channels) and exploitation techniques

Experience with debugging interfaces (e.g., JTAG, trace, GDB) in complex systems

Experience evaluating and operationalizing AI-assisted vulnerability discovery tools and workflows

Experience building scalable and automated analysis pipelines (e.g., scripting, distributed systems, agent-based approaches)

Rust experience or strong interest in memory-safe system design

Expert-level analytical thinking and strong intuition for how systems fail under adversarial conditions

Ability to lead complex, ambiguous technical investigations end-to-end

Strong interest in combining deep technical expertise with modern AI-assisted methodologies

Ability to influence technical direction across teams and organizational levels

Clear and authoritative communication of technical risks and findings

Mentorship mindset and willingness to develop others