Position: Embedded Security Engineer
Working Location: Ho Chi Minh
Contact to: Tuyen dung Vietsol ([protected info])
Job Descriptions:
- Design and implement end-to-end security solutions for automotive embedded systems (secure boot, trusted execution environments, secure storage, secure update, secure communication, etc.)
- Lead security architecture reviews and threat modeling for infotainment and connected vehicle platforms
- Develop and maintain security requirements, security engineering processes (SEP), and compliance with relevant standards
- Perform security hardening, code reviews, penetration testing, and validation of embedded software.
Job Requirements:
- Bachelor/Master's degree in Computer Science, Electrical Engineering, Cryptography, or equivalent. Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.) are a plus
- 2 to 5+ years of hands-on experience in embedded security, preferably in automotive, IoT, or mobile devices
- Strong knowledge about cyber security, i.e. cryptography, secure communication protocols, etc.
- Good knowledge of modern SoC security architectures, such as:
- Qualcomm (Trust-Zone, QTEE, Secure Boot, AVB/QVB, Keymaster, QTD)
- Renesas R-Car security subsystems
- Texas Instruments and Marvell chipset security features
- Experience in the following areas:
- Secure Boot & Verified Boot (Android Verified Boot, Qualcomm Verified Boot, dm verity)
- Trusted Execution Environments (Arm Trust-Zone, OP-TEE, FF-A, Virtual TEE)
- Cryptography implementation (Hash functions, Symmetric/Asymmetric encryption,
Key exchange, PKCS standards, PBKDF, OpenSSL Engine/Provider, TLS with PSK) - Storage security (FDE/FBE, LUKS, dm-verity, encrypted key containers)
- Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec)
Access control & hardening (SE-Linux, AppArmor, LSM, DAC/MAC, Root daemon restriction) - Secure debug, secure JTAG, secure flashing, secure software update (OTA), certificate management
- Hardware-backed key management (Android Keymaster, Titan M-like, HSM integration)
- Secure random number generation (TRNG), secure time/clock
- Signing tools (AVB, QVB, secure tool signing with KMS)
- OpenSSL, OpenSSL Engine/Provider, etc.
- Secure update frameworks (A/B, rollback protection, etc.)
- Good understanding of:
- Security engineering process
- Secure coding
- Android Automotive security model
- Linux/Yocto security hardening
- QNX security features
- AUTOSAR SecOC, HSM integration
- Firewall, IDS/IDPS in embedded environments
- Familiar with common attack vectors on embedded systems (side-channel, fault injection, firmware extraction, rollback attacks, etc.)
- Knowledge of post-quantum cryptography is a strong plus
- Experience in security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.)
Nice to have
- Experience working with OEMs or Tier-1 suppliers in the automotive industry
- Contribution to open-source security projects (OP-TEE, TrustZone, etc.)
- Familiar with functional safety (ISO 26262) and cybersecurity standards (ISO/SAE 21434, UNECE WP.29)
- Knowledge of secure production & supply chain security (HSM, secure manufacturing)
Benefit:
- Good salary (includes base salary, additional salary, housing allowance, meal allowance, etc.)
- 13th month salary + Incentive/performance bonus
- Salary review twice a year.
- Lunch monthly support
- Mon-Fri & alternative Saturday working schedule with 44 hours/week.
- 12 annual leave days plus 1 birthday leave
- Health care insurance
- Training & career development program
- Oversea working opportunities
- Working in international environment with experts around the world
- Opportunities for career advancement to Team Leader, Group Leader, and Manager positions
- Monthly budget for team activities, etc.