Embedded Security Engineer at Thistle Technolgies

At Thistle Technologies, we are on a mission to help developers build security resilience directly into their products. While embedded devices face the same sophisticated threats as modern servers and workstations, they often lack the necessary security mitigations. We are changing that by making it simple to incorporate robust, reliable security functionality into devices with high-security requirements. We believe in fostering a blame-less culture where innovation is driven by execution, experimentation, and a shared commitment to excellence.

The role

We are seeking a Senior Embedded Security Engineer to join our team on a full-time, remote basis. This is an opportunity for a seasoned professional to work from anywhere in the world while helping us shape the future of device security. You will be part of a small, highly collaborative, and distributed team that values autonomy and results over traditional office structures.

Core responsibilities

• Take product concepts in device security from the initial incubation phase through to demonstration and final production.
• Design, develop, deploy, and maintain new security features to evolve the Thistle Security Platform, while also co-maintaining existing features.
• Collaborate across teams with backend engineers, product managers, and business development, including providing support for sales calls and engaging with the open-source community.

Skills and experience

To be successful in this role, you should bring a deep technical background and a passion for building secure systems. We are looking for the following qualifications:

• At least 8 years of experience building and shipping production software within the embedded security field.
• Professional proficiency in low-level embedded software development using C/C++ or Rust, along with the ability to set up CI/CD pipelines for testing and deployment.
• Comprehensive knowledge of hardware security mechanisms, such as secure boot, trusted execution environments, inter-processor communications, and debugging interfaces.
• Strong understanding of embedded firmware and operating system security principles.
• Fluency in applied cryptography, including AES, hashing, ECC, and RSA, as well as familiarity with PKI, secure communication, and key management.
• Practical experience with software security, specifically regarding exploitation techniques in embedded systems, firmware reverse engineering, and the development of anti-exploitation countermeasures.

Compensation and benefits

We are committed to the well-being of our team members and offer a comprehensive benefits package designed to support a healthy work-life balance:

• A 4-day workweek to ensure you have time for your life outside of work.
• Unlimited vacation policy.
• Health, dental insurance, and vision insurance plan options.
• 401(k) retirement plan.
• The flexibility of a fully distributed, remote work environment.

How to apply

If you are passionate about device security and thrive in a startup environment that values collaboration and growth, we would love to hear from you. Please submit your application to join our team, and let us know how your experience aligns with our mission to secure the future of IoT devices.