D-TechWorks - Senior Embedded Software Security Engineer/Architect

Description :

Job Title : Architect (Manager Level) (Python)

Location : Hyderabad

Work Timings : 9 :00 AM 5 :00 PM IST (General Shift)

Notice Period : Immediate joiners preferred

Role Overview :

We are seeking an experienced Senior Embedded Software Security Engineer / Architect (Manager Level) with strong expertise in embedded product software development and security, particularly within medical devices or other regulated industries.

This role focuses on identifying, analyzing, and mitigating software vulnerabilities in embedded systems while ensuring compliance with global medical device cybersecurity and safety standards.

The ideal candidate will demonstrate deep technical proficiency, strong systems-thinking capabilities, and ownership in making sound technical decisions that directly impact product reliability and patient safety.

Key Responsibilities :

- Analyze embedded software to identify security vulnerabilities and assess potential safety impacts

- Perform vulnerability triage and evaluate risks to product security and patient safety

- Conduct CVE impact assessments and SOUP (Software of Unknown Provenance) risk analysis

- Apply secure coding practices in embedded software development and review processes

- Support compliance with medical device cybersecurity regulations and applicable global standards

- Evaluate and score software risks using industry-standard frameworks (CVSS, CWE, NVD)

- Provide clear remediation guidance for identified vulnerabilities

- Connect software behavior to clinical safety, system performance, and regulatory impact through systems thinking

- Collaborate with cross-functional teams including product development, quality, regulatory, and safety teams

- Maintain strong integrity, ownership, and accountability in technical decision-making

Experience Requirements :

- 8+ years of experience in one or more of the following areas :

1. Embedded product software development

2. Embedded product software security

3. Embedded product vulnerability analysis

- Experience working in medical devices or other regulated industries

- Strong hands-on experience in embedded software development using C++ and/or Python

- Good understanding of operating system concepts (processes, memory management, scheduling, etc.)

Technical Skills :

Must Have :

- Strong experience in embedded software development (C++ / Python)

- Solid understanding of embedded systems architecture

- Knowledge of secure coding practices

- Familiarity with cryptographic to Have :

- Experience in software vulnerability triage

- Experience with CVE impact assessment

- Understanding of SOUP risk analysis

- Familiarity with :

1. IEC 81001-5-1

2. ISO 14971

3.. FDA Cybersecurity Guidance

4. SBOM (Software Bill of Materials) practices

- Working knowledge of CVSS, CWE, and NVD scoring and :

- Bachelors or Masters degree in Computer Science, Embedded Systems, Electronics, or a related field

- Relevant certifications are a plus, such as :

1. CISSP

2. CSSLP

3. GICSP

4. eJPT

Soft Skills & Competencies :

- Strong sense of integrity, ownership, and accountability

- Excellent analytical and problem-solving skills

- Ability to make sound technical judgments in safety-critical environments

- Systems-thinking mindset linking software behavior to clinical and safety outcomes

- Effective communication and collaboration skills across cross-functional team.

(ref:hirist.tech)