Product Security Engineer – Embedded Systems

Product Security Engineer – Embedded Systems

Location: Pessac / Bordeaux, France

Onsite: Laboratory-based

A global technology company specialising in secure identity, authentication, payment and embedded technologies is looking for a Product Security Engineer to join its specialist security team in Pessac.

This is a hands-on role focused on the security evaluation of physical and embedded products, including secure devices, microcontrollers, smart cards, secure elements, connected products and other security-critical hardware.

You will work in a dedicated laboratory environment, analysing firmware, reviewing embedded code, testing hardware interfaces and identifying vulnerabilities in real products.

The role

You will be involved in:

• Security evaluation of embedded and physical products
• Firmware analysis and reverse engineering
• Review of embedded C / C++ code
• Analysis of low-level communication and debug interfaces
• Security testing of microcontrollers, secure elements and connected devices
• Assessment of secure boot, authentication and key-protection mechanisms
• Vulnerability discovery and technical reporting
• Development of bespoke test environments and tooling
• Supporting remediation and product-security improvement
• Working with wider engineering and security teams on assurance and certification activity

Depending on your background, you may also gain exposure to:

• Side-channel analysis
• Fault injection
• Smart Card / Secure Element security
• Hardware security evaluation
• Cryptographic implementation analysis

Relevant experience may include:

• Embedded C / C++
• Firmware development, debugging or analysis
• ARM, microcontrollers or SoCs
• Assembly language
• JTAG, UART, CAN, USB or similar interfaces
• Firmware reverse engineering
• Secure boot or embedded security
• Smart Cards, Secure Elements or HSMs
• Hardware or product-security testing
• Vulnerability research
• Side-channel analysis or fault injection
• Common Criteria / CESTI / security evaluation environments

This opportunity could suit:

• An existing embedded or product-security engineer
• A security evaluator looking to move closer to product development
• A strong embedded engineer looking to specialise in security
• A firmware or reverse-engineering specialist with an offensive mindset
• An engineer from a hardware, semiconductor, payment, defence or secure-device background

This is not a cloud, SOC or traditional network-security role . The focus is low-level, embedded and physical product security.