Requirement:
We are seeking an experienced Firmware and system integration Test/Validation Technical Lead to drive the testing and validation efforts for secure firmware solutions in cutting-edge platforms. The role requires a strong background in embedded systems testing, security validation, and automation to ensure the robustness, reliability, and security of firmware across a range of platforms. The ideal candidate will lead validation strategies, build testing frameworks, and collaborate with cross-functional teams to ensure high-quality and secure firmware releases.
Key Responsibilities:
- Testing Strategy & Execution:
- Define, develop, and execute comprehensive testing strategies for platform security firmware, covering:
- Secure Boot and firmware integrity validation.
- Cryptographic implementation testing.
- Secure firmware update mechanisms.
- Hardware root of trust (RoT) and Trusted Execution Environment (TEE) validation.
- Crypto Services like AES, RSA, ECC
- Perform security validation for features like rollback protection, key management, and secure communication protocols.
- Drive both manual and automated testing efforts to ensure compliance with industry standards.
- Automation Development:
- Develop and maintain automated test frameworks for validating firmware security features.
- Integrate test automation into CI/CD pipelines to ensure continuous validation.
- Implement tools for stress testing, fuzz testing, and penetration testing of firmware.
- Security Validation:
- Perform vulnerability assessments, fuzz testing, and penetration testing of firmware to uncover security flaws.
- Validate cryptographic algorithms, protocols, and secure storage implementations.
- Test firmware against known security threats and emerging attack vectors, such as side-channel attacks and fault injection.
- Collaborate with security engineers to ensure proper integration of security features.
- Debugging & Issue Resolution:
- Identify, analyse, and report firmware defects using debugging tools (e.g., JTAG, logic analysers, and protocol analysers).
- Work with development teams to root-cause and resolve issues related to firmware functionality and security.
- Compliance & Standards:
- Ensure validation processes meet security certification requirements, such as FIPS 140-3, Common Criteria, and NIST standards.
- Create test cases and reports required for security compliance audits.
- Team Leadership & Collaboration:
- Lead and mentor a team of validation engineers to execute testing plans effectively.
- Work closely with development, hardware, and security teams to align testing efforts with platform goals.
- Advocate for best practices in security testing and validation across teams.
- Documentation:
- Develop detailed test plans, test cases, and validation reports.
- Maintain thorough documentation of validation results, issue tracking, and test coverage.
Required Qualifications & Skills
- Bachelor's or Master's degree in Computer Science, Electrical Engineering, or a related field.
- 10+ years of experience in firmware validation, embedded systems testing, or security testing.
- Experience with CI/CD pipelines and test automation frameworks.
- Background in working with secure firmware in domains like IoT, automotive, or data center platforms.
- Strong expertise in testing embedded systems and firmware, particularly with a focus on security.
- Hands-on experience with security testing tools and techniques, such as fuzzing tools, penetration testing tools, and cryptographic validators.
- Proficiency in developing automated test scripts using languages like Python, Shell scripting, or C/C++.
- In-depth understanding of security technologies like TPMs, secure boot, cryptography, and trusted execution environments (e.g., ARM TrustZone), Key Management, Crypto Services.
- Knowledge of debugging tools like JTAG debuggers, protocol analyzers, and oscilloscopes.
