The opportunity:
Technology in Defence is rapidly evolving, and so are the risks to capabilities and success through an ever-changing security landscape. As customers demand higher levels of resilience in the products we create, our approach to securing systems and products needs to change with it.
We are recruiting for a Firmware Engineer to support development of security functions. You will work on some of the most challenging and rewarding security problems in the UK on some of the most exciting Defence projects, helping design and develop security solutions that sit at the heart of our products.
What you will do as a Firmware Engineer within Product Security:
Your work at Leonardo will see you addressing security risks in an agile, innovative and team-centric manner. You will work alongside a team of security engineers and consultants to support engineering delivery teams, aiding the design and development of new products and systems by providing guidance to ensure the customer’s capabilities remain secure.
Through engagement with engineering teams and customers, you will advise on solutions that address security concerns while providing value to the customer based on risk balance. Utilising a focus of supporting the customer to achieve their goals, you will endeavour to provide the best possible solutions balanced against the programme constraints.
Key responsibility areas involve:
Designing secure firmware cores to flow down to engineering teams, and supporting integration
Reviewing documentation such as design documents, system specifications, and risk profiles to identify potential vulnerabilities and propose appropriately secure solutions
Working with solution architects and engineers to ensure that systems meet stringent Design Integrity and security standards and satisfy relevant accreditation requirements
Participating in wider customer forums, to review security topics
What we need from you:
Ideally, we would like you to have the following skills; if you don’t have them but feel you could gain them whilst adding value to the team from alternative experience, we’d still like you to apply:
A degree or equivalent experience in science, technology, engineering or maths subjects
A passion for security and problem solving
Technical knowledge of secure firmware/embedded software and integration with electronics
Knowledge of high-speed digital electronics
Knowledge of developing designs for AMD, Microsemi and/or Intel FPGAs
Knowledge of firmware simulation and verification tools
Knowledge of scripting, using TCL and/or Python
Knowledge of concepts such as Isolated Design Flow, encryption, and secure boot
Understanding of the engineering product development lifecycle
Ability to listen, understand and communicate effectively (both written and verbal) with internal and external customers
Ability to be self-directed, conducting both independent learning and collaborating with other engineers to develop solutions that will increase the security posture of Leonardo products
Eagerness to learn and adapt to changing technologies
It would also be helpful if you had:
A working practical knowledge of NCSC CAPS Evaluation processes and practices with awareness of generic Secure by Design Principles as presented by NCSC, UK MOD and NIST
Practical experience of following DevSecOps lifecycles for embedded software/firmware
Experience in safety-critical engineering and/or developing embedded software/firmware to High Assurance requirements such as DO-178C/DO-254 standards or equivalent
Knowledge and experience of complex cryptography, especially implementing algorithms or utilising the approved cryptographic functions within FPGAs to create higher level security controls.
An understanding of developing cyber resilient products by addressing the 4 phases of resilience: Prepare, Absorb, Recover and Adapt
Security Clearance
You must be eligible for full security clearance. For more information and guidance please visit : https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels
