Firmware Security Certification Engineer

We are seeking a full-time Firmware Security Certification Engineer in Vancouver to provide hands-on technical expertise for the execution of Common Criteria certification activities for Dune-based devices. This role will work across firmware engineering, security, networking, test, and certification teams to translate certification requirements into implementable technical controls, reproducible evidence, and successful lab evaluations. The ideal candidate combines deep knowledge of Dune firmware with strong networking, automation, scripting, troubleshooting, and technical communication skills. 

Key Responsibilities

• Serve as a technical subject-matter expert for Common Criteria certification of Dune-based devices. 

• Analyze Security Target, Protection Profile, Security Functional Requirement, and assurance evidence needs and map them to Dune firmware architecture and device behavior. 

• Partner with firmware and security architects to identify gaps, define remediation plans, and validate implementation readiness. 

• Configure, build, deploy, and troubleshoot Dune firmware in certification test environments. 

• Develop and maintain automated tests, scripts, utilities, and repeatable workflows that produce objective certification evidence. 

• Execute functional, security, negative, regression, and interoperability testing, including network protocol and secure communications testing. 

• Investigate test failures across firmware, networking, services, authentication, cryptography, and device configuration. 

• Prepare clear technical artifacts, test procedures, results, defect reports, and responses to evaluator questions. 

• Work directly with internal engineering teams and external evaluation laboratories to resolve technical issues and maintain certification schedules. 

• Improve certification efficiency through reusable automation, documented methods, and earlier validation within the development lifecycle. 

Required Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or a related technical field, or equivalent practical experience. 

• Demonstrated experience developing, integrating, debugging, or validating Dune firmware or a closely related embedded device platform. 

• Strong understanding of embedded firmware architecture, operating-system services, device configuration, logging, and diagnostic methods. 

• Practical networking expertise, including TCP/IP, IPv4/IPv6, DNS, DHCP, HTTP/HTTPS, TLS, SNMP, 802.1X, certificates, and network troubleshooting. 

• Experience creating automated tests and scripts using Python, shell scripting, PowerShell, or comparable languages. 

• Ability to analyze complex technical requirements, isolate defects, reproduce issues, and drive them to closure across multiple teams. 

• Experience with source control, defect tracking, build environments, test frameworks, and continuous integration workflows. 

• Strong written and verbal communication skills, including the ability to produce precise technical evidence and explain issues to engineers, evaluators, and program stakeholders. 

• Ability to work on site or in a hybrid arrangement in Vancouver, as required by the team. Relocation will be offerred.

Preferred Qualifications

• Direct experience supporting a Common Criteria evaluation, including Security Target development, evaluation evidence, evaluator interactions, vulnerability analysis, or certification maintenance. 

• Knowledge of Common Criteria concepts, Protection Profiles, assurance activities, and certification-lab workflows. 

• Experience with enterprise printers, multifunction devices, embedded Linux, secure boot, cryptographic services, authentication, access control, audit logging, or secure update mechanisms. 

• Familiarity with packet capture and network diagnostic tools, security testing tools, and API or protocol test automation. 

• Experience developing test harnesses, managing test data, and integrating automated security tests into continuous integration pipelines. 

• Understanding of secure development lifecycle practices, threat modeling, vulnerability remediation, and security certification dependencies. 

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal"