Sr. Embedded Security Engineer

OUR MISSION SPAN is enabling electrification for all ⚡ WE ARE A MISSION-DRIVEN COMPANY DESIGNING, BUILDING, AND DEPLOYING PRODUCTS THAT ELECTRIFY THE BUILT ENVIRONMENT, REDUCE CARBON EMISSIONS, AND SLOW THE EFFECTS OF CLIMATE CHANGE. - Decarbonization is the process to reduce or remove greenhouse gas emissions, especially carbon dioxide, from entering our atmosphere. - Electrification is the process of replacing fossil fuel appliances that run on gas or oil with all-electric upgrades for a cleaner way to power our lives. AT SPAN, WE BELIEVE IN: - Enabling homes and vehicles powered by clean energy - Making electrification upgrades possible - Building more resilient homes with reliable backup - Designing a flexible and distributed electrical grid THE ROLE We are looking for a hands-on individual with a security engineering mindset to join us as a Senior Embedded Security Engineer as part of the Security team at SPAN. In this role, you will directly influence the security of software across our entire hardware product line. We are looking for someone with a proven track record of building and deploying hardware security technologies who can bring deep expertise to our expanding ecosystem. Ideally, you have notable skills and experience in the following core areas: - Applied cryptography and cryptographic service infrastructure - Operating system security and OS-level hardening - Secure / Authenticated boot flows - Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs) WHAT YOU’LL DO (RESPONSIBILITIES) - Architect and develop robust security infrastructure, including cryptographic services and other security-critical components. - Implement secure and authenticated boot flows to ensure device and firmware integrity from power-on. - Design and secure Over-the-Air (OTA) update systems, ensuring robust encryption, cryptographic signing, authentication, and anti-rollback protections for remote deployments. - Design and integrate security provisioning protocols into the factory manufacturing process. - Establish secure device identities and root-of-trust architectures utilizing onboard hardware security modules (HSMs/TPMs). - Design and implement secure debug architectures to safeguard physical and logical interfaces (e.g., JTAG, SWD, UART) against unauthorized access and reverse engineering. - Harden Linux and POSIX-based operating systems to minimize attack surfaces and secure the software stack. - Rapidly prototype new security features, helping to identify vulnerabilities, design mitigations, and test continuous security improvements. WHAT YOU’LL BRING (QUALIFICATIONS) - Experience: 6+ years of professional experience in hardware security, embedded systems engineering, or a closely related field. - Security Hardware: Advanced hands-on experience configuring and deploying specialized security hardware, including TPMs and HSMs. - Software Development: Strong programming proficiency in C/C++, Rust and Python for developing secure, high-performance software and automation tools. - OS Security: Demonstrated experience designing, architecting, and implementing security solutions at the operating system level. - Systems Engineering: Core expertise in bare-metal embedded systems development and firmware security. - Linux Ecosystem: Familiarity with building and configuring custom Linux distributions using Yocto Linux. LIFE AT SPAN Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN. The