Security Firmware Engineer

Job Title : Security Firmware Engineer PSP Firmware

Experience : 4-10 Years

Location : Bangalore

Employment Type : Full-Time

Key Responsibilities :

- Design, develop, debug, and maintain PSP firmware and low-level security firmware modules for embedded and platform security solutions.

- Implement and enhance Secure Boot, Chain of Trust, and Hardware Root of Trust mechanisms to ensure secure platform initialization and runtime protection.

- Develop firmware components supporting silicon security subsystems, platform security policies, secure provisioning, authentication, and trusted services.

- Work on security technologies such as TPM/fTPM, Widevine, secure storage, secure key management, attestation, and firmware authentication.

- Design and implement cryptographic services using algorithms such as AES, RSA, ECC, SHA, HMAC, digital signatures, and secure key exchange mechanisms.

- Develop and integrate trusted applications, secure monitor services, and trusted communication handshakes between secure and non-secure domains.

- Support firmware-level implementation of security protocols, secure communication channels, certificate validation, and device identity management.

- Collaborate with silicon, hardware, BIOS, kernel, and software teams for end-to-end security feature integration and bring-up activities.

- Participate in architecture discussions for secure subsystem design, threat modeling, and security hardening strategies.

- Analyze security vulnerabilities, perform root cause analysis, and implement mitigations against firmware-level threats and attacks.

- Support debugging and validation using JTAG, firmware debuggers, trace tools, and lab validation setups.

- Contribute to secure firmware testing, code reviews, compliance requirements, and secure coding practices.

- Work with validation teams to ensure robust verification of secure boot flows, trusted execution, and cryptographic implementations.

- Drive performance optimization, reliability improvements, and scalability enhancements in security firmware modules.

Required Skills :

- 4 - 10 years of experience in embedded software/firmware development with strong hands-on expertise in C programming.

- Strong experience in Security Firmware / PSP Firmware / Embedded Security development.

- Hands-on expertise in Secure Boot, Chain of Trust, and Root of Trust concepts and implementation.

- Strong understanding of silicon security subsystems and platform security policies.

- Experience with TPM/fTPM, secure provisioning, device attestation, and trusted platform security concepts.

- Good knowledge of Widevine and content protection/security frameworks.

- Strong understanding of Cryptography and cryptographic algorithms including symmetric/asymmetric encryption and authentication methods.

- Experience with trusted applications, secure handshakes, authentication protocols, and secure communication mechanisms.

- Strong debugging skills in low-level firmware and embedded systems environments.

- Good understanding of secure coding practices, vulnerability mitigation, and firmware security hardening.

Preferred Qualifications :

- Experience with ARM TrustZone or OP-TEE based trusted execution environments.

- Exposure to secure firmware development for SoCs, processors, or platform security controllers.

- Knowledge of hardware security concepts such as secure enclaves, anti-tamper mechanisms, secure provisioning, and device identity.

- Experience working with bootloaders, BIOS/UEFI, low-level drivers, and platform initialization flows.

- Familiarity with firmware validation, penetration testing, or security compliance standards.

Nice to Have :

- Experience in semiconductor or product engineering environments.

- Exposure to authentication frameworks, certificate infrastructure, and secure protocol stacks.

- Knowledge of vulnerability assessment tools and threat modeling methodologies.

- Familiarity with performance tuning and optimization of security firmware modules.

Educational Qualification :

- Bachelors or Masters degree in Computer Science, Electronics, Embedded Systems, or related field.