Germany
HUB.KI GmbH
Elatec GmbH
Senior Embedded Firmware Security Engineer (m/f/d)
Germany
Puchheim, Bavaria, Germany
DockerC++
Automatic translation. Check the original.
Company Description
Hidden Champion – this applies not only to ELATEC as a company, but also to our RFID readers. Hardly anyone notices them, yet they are ubiquitous: at office access points, printers, elevators, or charging stations. With over 35 years of experience, we are a technology leader and, in some segments, even a global market leader – as part of Allegion plc., we combine the agility of a medium-sized company with global reach.
Job Description
In this role, you will combine operational firmware development (approx. 60%) with architecture and security responsibilities as a Subject Matter Lead for Cybersecurity (approx. 40%) – from code to security concept.
- Firmware Development – Implementation and debugging of embedded firmware in C/C++ for ARM Cortex-M33: HAL, drivers, middleware, and peripheral integration on Zephyr RTOS-based platforms.
- Embedded Security (SML) – Responsibility as Subject Matter Lead for device security: design and implementation of Secure/SafeBoot concepts, Root-of-Trust, key storage, PKI, and integration of Secure Elements.
- Threat Modeling & Security Design – Development and maintenance of the security assurance concept: security requirements, design reviews, and coordination of security assessments and penetration tests.
- Platform Integration – Configuration and integration of Zephyr RTOS (Kconfig, West) on target MCUs; derivation of architecture and security best practices for the entire product portfolio.
- Architecture Documentation – Documentation of security-relevant architectural decisions as well as the creation of interface and module descriptions as a binding reference for the development team.
- Knowledge Transfer & Coaching – Sharing security expertise with colleagues, participating in design reviews, and close coordination with product management and hardware development.
Qualifications
- Education – Completed degree in computer science, electrical engineering, or a comparable qualification – or equivalent, proven professional experience.
- Embedded Experience – At least 8 years of practical experience in embedded development with C/C++ on ARM microcontrollers; deep understanding of the Cortex-M33 platform and its security mechanisms.
- Embedded Security (mandatory) – Expert knowledge in Secure Boot / SafeBoot, Root-of-Trust, PKI, key management, and Secure Elements; practical experience with TrustZone, TF-M, or PSA on Cortex-M33 is a prerequisite.
- Zephyr RTOS – Sound, practical experience with Zephyr (configuration, drivers, Kconfig/West) on embedded platforms.
- Security Processes – Experience in threat modeling, security reviews, and the establishment of assurance or vulnerability management processes along a Secure Development Lifecycle (SDLC).
- Communication Skills – Very good English skills and conversational German; structured, independent working style with a clearly recognizable security mindset.
- Preferred – Knowledge of OTA updates, rollback mechanisms, or HSM/TPM; experience with CI/CD pipelines (GitLab CI, Azure DevOps), Docker-based build environments, or static analysis tools.
Additional Information
Why ELATEC? Your Benefits
- Key Technical Role – You are the authoritative voice for embedded security at ELATEC – your assessments shape product decisions, are heard, and are implemented directly.
- Close Collaboration – Direct cooperation with hardware development and product management – short decision-making paths, fast implementation.
- Product with Substance – You develop security solutions for RFID readers that are used worldwide in security-critical applications – from access control and secure print to single sign-on.
- Hands-on with Cutting-Edge Hardware – Direct access to current RFID reader platforms, evaluation boards, and security hardware (Secure Elements, HSM) – you work on the real product, not simulations.
- Professional Development – Professional and personal development opportunities within an international technology group.
- Collaboration on Equal Terms – Close integration into the internal engineering team as well as regular exchange with external security partners (e.g., certification bodies, pentest service providers).
- Attractive Benefits – 30 vacation days, 300 € health budget, 30% employer contribution to company pension scheme, as well as company events and other benefits.
Ready for the next step?
Then apply now – a resume is sufficient, a cover letter is not required.
We look forward to meeting you!
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile