Principal Embedded Security Vulnerability Analyst (Embedded Security)

TL;DR

Principal Embedded Security Vulnerability Analyst (Embedded Security): Leading deep technical analysis of embedded systems to identify vulnerabilities at the hardware/software boundary with an accent on low-level firmware and boot code. Focus on driving root cause analysis of complex vulnerabilities and integrating AI-assisted agentic workflows to scale security assessments.

Location: Gratkorn, Austria (Hybrid)

Company

hirify.global is a leading global semiconductor manufacturer specializing in secure connectivity solutions for automotive, industrial, and IoT markets.

What you will do

• Lead in-depth vulnerability analysis of embedded software, including bare-metal, RTOS, and trusted execution environments.
• Analyze boot flows, privilege boundaries, and security-critical components such as crypto libraries and isolation mechanisms.
• Perform root cause analysis and assess the systemic impact and exploitability of identified weaknesses.
• Architect and scale AI-assisted vulnerability discovery techniques using LLM-based and agentic workflows.
• Develop advanced analysis tooling, including static analysis, fuzzing, and automation frameworks.
• Influence product architecture by translating security findings into systemic mitigations across teams.

Requirements

• Degree in Electrical Engineering, Computer Science, Mathematics, or equivalent practical experience.
• Expert understanding of low-level system behavior, including memory layout, interrupts, and privilege levels.
• Extensive experience in C programming and strong familiarity with ARM and/or RISC-V architectures.
• Strong proficiency in assembly-level debugging and low-level system analysis.
• Must be based in or able to work from Gratkorn, Austria.

Nice to have

• Proven track record in vulnerability research, reverse engineering, or exploit development.
• Experience with fuzzing, symbolic execution, or static and dynamic analysis tools.
• Familiarity with debugging interfaces such as JTAG, trace, and GDB in complex systems.
• Experience with Rust or a strong interest in memory-safe system design.
• Experience operationalizing AI-assisted vulnerability discovery tools and workflows.

Culture & Benefits

• Market competitive compensation based on semiconductor industry benchmarking.
• Flexible working arrangements, including home office and flexible working hours.
• Meal benefits and other corporate perks.
• Opportunity to influence the security architecture of next-generation silicon products.
• Collaboration with a world-class team of hardware, firmware, and applied security researchers.