Embedded Security Engineer at Thistle Technolgies

At Thistle Technologies, we are on a mission to help developers build robust security resilience directly into their products. While embedded devices frequently face the same sophisticated threats as traditional servers and workstations, they often lack the modern security mitigations required to stay protected. We bridge this gap by making it simple to incorporate high-level security functionality into devices with demanding requirements. We are a collaborative, distributed team that values autonomy, experimentation, and a blame-less culture, and we are looking for a talented individual to join us in shaping the future of device security.

About the Role

We are seeking a Senior Embedded Security Engineer to join our team on a full-time basis. In this role, you will be instrumental in taking product concepts from initial incubation through to demonstration and final production. You will help evolve our security platform by designing and deploying new features, while ensuring our existing solutions remain at the forefront of the industry.

Key Responsibilities

• Design, develop, and maintain innovative device security features to expand the capabilities of the Thistle Security Platform.
• Collaborate across teams with backend engineers, product managers, and business development leads, including providing technical support for sales initiatives.
• Engage with the broader developer and open-source communities to advocate for our platform and demonstrate its effectiveness in securing embedded hardware.

Requirements

To be successful in this role, you should possess a strong background in software engineering and a passion for security. We are looking for the following qualifications:

• At least 8 years of experience building and shipping production-grade software within the embedded security sector.
• Professional proficiency in low-level embedded development using C, C++, or Rust, along with the ability to manage CI/CD pipelines for automated deployment.
• Deep technical knowledge of hardware security mechanisms, such as secure boot, trusted execution environments, and debugging interfaces.
• Comprehensive understanding of embedded firmware security, operating system principles, and applied cryptography, including AES, ECC, RSA, and hashing.
• Familiarity with PKI, secure communication protocols, and key management strategies.
• Proven experience in software security, specifically regarding firmware reverse engineering, exploitation techniques, and the development of anti-exploitation countermeasures.

Location

This position is fully remote and can be performed from anywhere.

Compensation and Benefits

We believe in supporting our team members with a comprehensive package that promotes both professional growth and personal well-being. Our benefits include:

• Equity compensation.
• A 4-day workweek to ensure a healthy work-life balance.
• Unlimited vacation policy.
• Comprehensive dental and vision insurance plans.
• 401(k) retirement plan.
• The flexibility of a fully distributed, remote work environment.