- Company Name
- McNally Recruitment Ltd
- Job Title
- Embedded Software Engineer
- Job Description
-
**Job title:** Embedded Software Engineer
**Role Summary:**
Design, develop, and secure embedded firmware and software components. Apply secure coding practices, threat modeling, and compliance with industry standards to ensure product security and reliability.
**Expectations:**
- Minimum 5 years in embedded firmware development.
- Engineering degree in Software, Computer Science, Cybersecurity, or equivalent.
- Proficiency in C/C++ programming.
- Experience with secure coding, threat modeling, static code analysis, and software composition analysis.
**Key Responsibilities:**
- Perform security requirements and risk analysis.
- Conduct threat modeling and apply secure design principles (least privilege, defense‑in‑depth, secure defaults).
- Implement secure coding guidelines to mitigate vulnerabilities such as buffer overflows and injection flaws.
- Use static code analysis tools to identify security issues.
- Apply software composition analysis for supply‑chain security.
- Perform unit testing, code reviews, defect analysis, and remediation.
- Ensure compliance with IEC 62443, ISO 27001, and other relevant standards.
- Support internal and external audits.
- Stay current on emerging threats, tools, and best practices; drive continuous improvement.
**Required Skills:**
- Strong C/C++ programming.
- Knowledge of encryption algorithms, key management, and secure protocols (TLS, SSH, etc.).
- Understanding of common vulnerabilities (OWASP Top 10, CWE/SANS Top 25).
- Familiarity with Linux, Windows, RTOS, TCP/IP, DNS, HTTP/S.
- Experience with industrial protocols (Serial, Modbus, HART).
- Knowledge of IEC 62443, ISO 27001, NIST, OWASP standards.
- Experience implementing DevSecOps practices; Azure DevOps experience a plus.
- Self‑directed, motivated, and collaborative team player.
**Required Education & Certifications:**
- Bachelor’s or Master’s degree in Software Engineering, Computer Science, Cybersecurity, or equivalent.
- Demonstrated knowledge of IEC 62443, ISO 27001, and NIST frameworks.
Cumbernauld, United kingdom
Hybrid
Mid level
10-11-2025