At a Glance
- Tasks: Securely design and implement embedded firmware while tackling cybersecurity challenges.
- Company: Join a leading tech firm focused on innovative security solutions.
- Benefits: Enjoy a hybrid work model, competitive salary, and opportunities for professional growth.
- Why this job: Make a real difference in cybersecurity while working with cutting-edge technology.
- Qualifications: 5+ years in embedded systems, strong C/C++ skills, and a passion for security.
- Other info: Located in Scotland, with occasional travel for training and support.
The predicted salary is between 36000 - 60000 £ per year.
The Embedded Security Developer will be responsible for ensuring the secure design and implementation of embedded firmware and software components within our product portfolio. This role involves applying secure coding practices, performing threat modeling, and ensuring compliance with industry standards and internal processes. The ideal candidate will have a strong background in embedded systems development and a passion for cybersecurity.
PLEASE NOTE the client will only accept candidates who are authorised to work in the UK, without the requirement for sponsorship or ANY type of visa (e.g. dependant/spousal, post-study etc.). In addition, this role is hybrid based with 4 days in the Scottish office, therefore you should currently be located in Scotland.
PRINCIPLE JOB RESPONSIBILITIES- Perform security requirements analysis
- Conduct risk analysis and threat modeling
- Ensure secure design principles are applied, such as least privilege, defence in depth, and secure defaults
- Ensure secure implementation of requirements and threat mitigations, including:
- Follow secure coding guidelines to prevent common vulnerabilities (e.g., buffer overflows, injection flaws)
- Application of Static Code Analysis to identify security vulnerabilities in code
- Application of Software Composition Analysis to ensure supply chain security
- Unit testing and code reviews
- Defect analysis and remediation
- Minimum 5 years of experience in developing embedded firmware
- Engineering degree in Software, Computer Science, Cybersecurity or equivalent demonstrated knowledge.
- Strong C/C++ programming skills
- Understanding of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.)
- Strong understanding of common vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25)
- Familiarity with Linux, Windows, RTOS and network protocols (TCP/IP, DNS, HTTP/S)
- Understanding of industrial protocols (e.g., Serial, Modbus, HART)
- Experience implementing DevSecOps best practices; Azure DevOps experience is a plus
- Knowledge of industry standards: IEC 62443, ISO 27001, NIST, OWASP
- Self-directed and motivated in a team-oriented environment
CANDIDATES MUST POSSESS HANDS-ON EXPERIENCE WITHIN THE SECURITY ASPECT of the role in accordance with CRA requirements.
Embedded Software Engineer employer: McNally Recruitment Ltd
Contact Detail:
McNally Recruitment Ltd Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Embedded Software Engineer
✨Tip Number 1
Network, network, network! Get out there and connect with folks in the embedded systems and cybersecurity space. Attend meetups, webinars, or even local tech events. You never know who might have a lead on your dream job!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those related to secure coding and embedded firmware. This will give potential employers a taste of what you can do and set you apart from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on common vulnerabilities and secure design principles. Be ready to discuss how you've applied these in your past work. Confidence in your knowledge will impress interviewers!
✨Tip Number 4
Don’t forget to apply through our website! We’ve got some fantastic opportunities waiting for you, and applying directly can sometimes give you an edge. Plus, it’s super easy to keep track of your applications that way!
We think you need these skills to ace Embedded Software Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in embedded systems and cybersecurity. We want to see how your skills align with the job description, so don’t be shy about showcasing relevant projects or achievements!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you’re passionate about embedded security and how your background makes you a perfect fit for our team. Keep it engaging and personal – we love to see your personality!
Showcase Your Technical Skills: When filling out your application, make sure to mention your strong C/C++ programming skills and any experience with secure coding practices. We’re looking for candidates who can demonstrate their technical prowess, so don’t hold back!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it’s super easy – just follow the prompts and you’ll be all set!
How to prepare for a job interview at McNally Recruitment Ltd
✨Know Your Stuff
Make sure you brush up on your embedded systems knowledge and secure coding practices. Be ready to discuss specific examples of how you've applied secure design principles in your previous projects, especially around threat modelling and risk analysis.
✨Showcase Your Skills
Prepare to demonstrate your C/C++ programming skills. You might be asked to solve a coding problem or explain how you've tackled vulnerabilities like buffer overflows in the past. Practising common coding challenges can really help you shine.
✨Understand the Standards
Familiarise yourself with industry standards like IEC 62443 and ISO 27001. Be prepared to discuss how these standards influence your work and how you ensure compliance in your projects. This shows that you’re not just technically skilled but also aware of the bigger picture.
✨Be Ready for Scenario Questions
Expect scenario-based questions where you’ll need to apply your knowledge to real-world situations. Think about how you would handle a security breach or implement DevSecOps best practices. This is your chance to showcase your problem-solving skills and proactive mindset.