About the role
Location: South Tyneside
Working Pattern: Hybrid, up to 2 days working from home
Employment Type: Permanent
Salary: Competitive + Bonus + Benefits
We are looking for an experienced Embedded Security Expert to join an established engineering team developing secure embedded products for critical infrastructure within the energy and power sector.
This is not a traditional IT or enterprise cybersecurity position. It is a hands-on embedded software security role, combining C/C++ engineering with product security, secure architecture and the implementation of cybersecurity requirements directly within embedded devices and firmware.
Working within a multidisciplinary engineering team, you will help ensure products are secure by design and meet evolving cybersecurity requirements.
Key Responsibilities
Define and implement security requirements and features within embedded software and firmware
Develop secure embedded software using C/C++ and contribute to secure product architecture
Perform threat modelling, security risk assessments, vulnerability assessments and design reviews
Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements
Lead the investigation and remediation of product vulnerabilities while championing secure development practices across the engineering team
Experience Required
Strong commercial experience developing embedded software using C and/or C++
Practical understanding of embedded systems including ARM architectures, RTOS environments and bootloaders
Hands-on experience implementing cybersecurity controls within embedded products, devices or firmware
Good understanding of secure software development, threat modelling, vulnerability assessment and security testing
Experience working within a product development environment and translating security requirements into practical engineering solutions
Particularly Relevant Experience
Secure Boot, secure firmware updates and secure device provisioning
Cryptography including AES, RSA, ECC and TLS
PKI, certificate management, secure key storage and key management
Product security standards such as IEC 62443, IEC 62351 or the Cyber Resilience Act
Security engineering within power systems, energy, industrial automation, control systems, IEDs or other critical infrastructure environments
You do not need experience across every technology or standard listed. The key requirement is a strong combination of embedded software engineering and practical product security, with the ability to turn cybersecurity requirements into secure, working embedded solutions.
The Team
You will join a collaborative engineering operation in South Tyneside as part of a multidisciplinary team developing long-lifecycle embedded products.
This is a hands-on environment where everyone is expected to contribute and take ownership. You will have the opportunity to become a key point of expertise for embedded security, working alongside software, hardware, systems and test engineers as security requirements continue to increase across the product portfolio.
The role is based in South Tyneside with up to two days per week working from home. Flexible working hours are available to help accommodate commitments outside work.
Benefits
26 days' annual leave plus bank holidays, with the option to purchase an additional 5 days
Employer pension contribution of up to 10%
Annual company performance-related bonus of approximately 5%
Subsidised healthcare
Salary sacrifice benefits and flexible working hours
If you are an embedded software engineer with a strong interest or background in product cybersecurity and want to work on technology where security, reliability and resilience genuinely matter, please apply for further information.
NRG is an equal opportunities employer committed to promoting a diverse and inclusive workplace. We oppose all forms of unlawful or unfair discrimination on the grounds of any protected characteristic. Our aim is to create an environment that encourages diversity, builds on individual differences, and responds equitably to the needs of all. We proactively take steps to fulfil our legal obligations, remove barriers, monitor for fairness, reflect the communities we serve, and enforce a zero-tolerance policy for breaches of our Equality and Diversity policy.