Security Engineer (Purple Team)

Join Applied, a leading company in the automotive technology sector, as a Security Engineer (Purple Team). In this multifaceted role, you will play a crucial part in ensuring the security and integrity of our products, particularly focusing on our Vehicle OS, Self Driving Systems, and Over-The-Air (OTA) and remote command center backend systems. You will collaborate closely with cross-functional teams, lead security verification and validation initiatives, conduct hands-on security testing, and work with various business units to develop secure automotive products.

• Collaborate with cross-functional teams to enhance product security, focusing on offensive security and recommending defensive techniques.
• Lead security verification and validation initiatives, serving as the point of contact for all security V&V activities.
• Conduct hands-on security testing, perform risk assessments, and prioritize security bugs and threats based on risk levels.
• A good understanding of embedded systems and how software interacts with hardware
• A solid understanding of hardware security primitives, including secure boot, key management, and cryptographic accelerators
• 2+ years of industry experience in software engineering or product security engineering
• Experience with network security(firewall configurations, ssh authentication)
• The ability to act as a technical lead and coordinate security projects between internal teams and external customers
• Proficiency in programming with C/C++ or Python
• Experience performing formal risk assessments and the ability to prioritize mitigations based on risk levels
• Strong experience in penetration testing or hands-on security assessment of embedded systems
• Security expertise in one or more of the following: C, C++, x86, ARM, cryptography, or exploit development
• Bachelor's degree in Cybersecurity, Information Technology, Computer, Software Engineering, or equivalent
• Good technical knowledge of Linux or QNX internals
• Proficiency in code auditing and vulnerability research using both manual and automated testing tools
• Experience with security tooling, including vulnerability databases and automated fuzzing frameworks (e.g., AFL, libFuzzer, or specialized automotive tools)
• Experience in an automotive security environment and familiarity with protocols like CAN, Automotive Ethernet, and UDS
• Understanding of automotive chips (SoCs/MCUs) and hardware security principles
• Familiarity with automotive standards such as ISO 21434 and UN R155
• Knowledge of Android Security or other embedded operating systems
• Background in securing Hardware Security Modules (HSM) and Trusted Execution Environments (TEE)