Cybersecurity Senior Firmware Engineer As a Cybersecurity Senior Firmware Engineer, you will contribute to the development of secure firmware for a wide range of embedded products. Your role will include reviewing product specifications with a cybersecurity mindset and implementing robust, secure firmware solutions to meet the needs of Resideo's customers. You'll work collaboratively with cross-functional teams to ensure products meet not only functional but also security and compliance requirements. Join us and discover why a career with Resideo in embedded security is the opportunity you've been looking for! Job Duties + Design and develop secure firmware for existing and new products + Integrate cryptographic libraries and implement secure boot, firmware signing, and key management mechanisms + Facilitate secure builds using source control tools with security in mind (e.g., signed commits, SBOM tracking) + Plan and estimate development tasks, including potential security impact assessments + Support all phases of the secure software lifecycle: design, implementation, integration, testing, and release + Participate in security-focused peer code reviews and maintain secure coding practices + Collaborate with hardware, systems, and software teams to define and enforce firmware security requirements + Assist in failure analysis with a focus on identifying security vulnerabilities and attack vectors + Help maintain firmware and internal tools, including those for vulnerability scanning, security testing, and automation + Contribute to documentation of secure design principles and product threat models + Prototype security-focused proof-of-concepts and participate in internal security research initiatives You Must Have + 3+ years experience programming in C and/or C++, with exposure to Python or scripting languages + An understanding of basic cryptography (e.g., encryption, hashing, certificates) + Proven professional experience with, and knowledge of secure coding principles and embedded systems basics We Value + Strong interpersonal, verbal, and written communication skills + Familiarity with Secure Boot, TPM, TrustZone, or HSMs + Knowledge of common embedded vulnerabilities (e.g., stack overflows, buffer management issues) + Interest in or experience with firmware signing, OTA update security, and anti-rollback mechanisms + Understanding of embedded security standards (e.g., NIST 800-193, ISO 21434, or IEC 62443) + Passion for cybersecurity and eagerness to learn secure firmware development + Understanding of protocols like RS-232, I2C, SPI, UART, and their potential attack surfaces + Knowledge of embedded real-time operating systems (RTOS) and secure thread handling What's In It For You + Innovation: Bring your creative ideas to the table and be part of a company that values out-of-the-box thinking + Growth: Join a dynamic team with ample opportunities for professional and personal development + Resideo provides employees with a comprehensive benefits package, including life and health insurance, life assistance program, accidental death and dismemberment insurance, disability insurance, retirement plans, vacation & holidays