Hardware Security Engineer
Flock SafetyFull Time
Senior (5 to 8 years)
Edinburgh, Scotland, United Kingdom
Candidates must have a Bachelor's or Master's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field, with a PhD being a plus. A minimum of 5 years of professional experience in embedded systems security is required, along with a proven track record of working directly with OP-TEE on ARM/embedded platforms. Strong embedded firmware development skills in C, C++, or Rust are essential, as is hands-on experience with secure boot, trusted firmware, cryptography, and device attestation. A solid background in hardware security, including tamper resistance, key storage, and side-channel mitigation, is necessary. Deep knowledge of biometric device security considerations, including data protection, spoofing resistance, and privacy, is required. Familiarity with certification requirements such as ISO/IEC 30107-3, ISO/IEC 19795, ISO/IEC 24745, and FIPS 140-3 is expected. Experience with Linux kernel development for embedded devices and reproducible build systems like Yocto or Buildroot is also required.
The Senior Embedded Security Engineer will be responsible for developing embedded firmware and applications to run in OP-TEE on ARM-based embedded platforms. This includes implementing secure boot, firmware integrity protections, and hardware-backed key management. The role involves designing and integrating remote attestation workflows with external device attestation services. Ensuring device security aligns with GDPR, UK Data Protection Act, US biometric privacy laws, and certification standards is a key responsibility. Developing layered tamper-prevention strategies, both hardware and software, is also part of the role. The engineer will architect methods for running ML models securely inside the TEE, protecting sensitive model elements. Collaboration with hardware, firmware, and compliance teams to pass required certifications and the production of technical security documentation, including support for regulatory audits, are also expected duties.
Blockchain solutions for Ethereum network
Nethermind.io focuses on blockchain solutions, particularly for the Ethereum network, offering services like a customizable Ethereum client, smart contract development, and security audits. They also research Layer 2 scaling solutions to improve transaction speed and develop Maximal Extractable Value (MEV) solutions for fair transaction processing. Their unique offerings include open-source tools like Warp for deploying smart contracts on StarkNet and the Voyager block explorer for interacting with StarkNet. The goal is to empower developers and enterprises to effectively use decentralized technologies while generating revenue through service fees and consulting.