Embedded Security Engineer– Security Certifications

About Us

Keysight Technologies is on the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

For this role, you will lead security evaluations of embedded products such as MCUs, secure elements, and complex SoCs under certification scheme requirements. Our purpose is to work closely with clients to evaluate, explain, and strengthen the security of their products against recognized industry standards and certification requirements. Through independent evaluation and technical guidance, we help clients make informed security decisions and build secure products.

As a security engineer performing end-to-end security assessments, you need to have hardware-oriented security knowledge, with sufficient software expertise to perform firmware and source-code reviews, lead technical evaluations, coach colleagues, and represent technical conclusions to customers and certification schemes.

Responsibilities

Work closely with clients to understand their technical and organizational needs, translate evaluation findings into practical insights, and support them in achieving their goals.

Lead embedded security evaluations under security certification schemes such as SESIP, PSA, EUCC, and Global Platform TEE.

Translate analysis results into actionable test plans and provide technical guidance to penetration testers.

Present evaluation and technical conclusions to internal reviewers, customers, and certification bodies.

Represent Keysight in technical discussions with certification bodies, scheme owners, and industry groups such as SESIP, PSA Certified, Global Platform, EUCC, and related stakeholders.

Guide/coach junior security engineers and review their technical output.

Contribute to the development of internal evaluation methodology, technical guidance, and certification know-how.

Key qualifications

Minimum 4 years of experience in security evaluation, certification, embedded security, vulnerability research, or related field.

Experience performing vulnerability analysis (AVA_VAN.2/3 or equivalent), and capability of adapting analysis to the corresponding specification (e.g. SESIP Level 2/3, PSA Certified, CC EAL 2-4).

Demonstrable experience of leading evaluations, coaching junior evaluators, and reviewing technical output.

Ability to assess security functionality that spans both hardware and software domains

Good understanding of embedded system architecture and its different components such as MCUs, MPUs, SoCs, Secure Elements, TEEs, and related devices.

Ability to evaluate hardware-assisted security functionality including secure boot, roots of trust, provisioning, isolation mechanisms, debug protection, and cryptographic services.

Ability to review and assess low-level software and firmware implemented in C, C++, Rust, and assembly as part of security evaluations.

Ability to communicate technical evaluation results and security conclusions effectively through clear reports, presentations, and discussions with customers, certification bodies, and management audiences.

Ability to understand customer requirements, provide meaningful technical guidance, and discuss evaluation approaches, findings, and certification-specific challenges with customers and certification bodies.

Good to have

Experience participating in technical working groups and industry meetings with certification bodies and scheme owners such as GlobalPlatform, PSA Certified, SESIP, Common Criteria, and EUCC stakeholders.

Familiarity with embedded testing activities such as firmware reversing, interface probing, protocol analysis, MITM testing, exploit development, or hardware-assisted testing.

RTL review experience is not required but appreciated.

Experience contributing to evaluation methodologies, internal guidance, certification processes, and training materials.

Excellent interpersonal and communication skills; thrives in team environments with diverse stakeholders including technical teams, certification bodies, and customers.

Why join us?

Global exposure – You'll have opportunities to travel internationally, collaborate directly with clients and schemes, and experience a diverse range of technologies, products, and security challenges.

Assess cutting-edge technologies across software, firmware, hardware, and embedded systems.

Engage with products before they reach market and influence their security from the outset.

Collaborate with experienced security engineers, researchers, and architects.

Help shape security decisions throughout the product lifecycle and work directly with engineering teams to drive meaningful improvements.

Learn from specialists across multiple security disciplines.

For this job you will lead security evaluations of a variety of products from standalone chips to full-fledged STBs. Our purpose is to work closely with clients and assess if the security of their products meets the security requirements. In this way, we help raise the security level of the different industries we work in.