Senior Yocto OS Embedded Developer

An OS engineer with experience in:

• BitBake / Yocto / OpenEmbedded
• Linux kernel hardening internals, such as init on alloc, init on free, integrity measurement architecture, integrity policy enforcement, SELinux or another mandatory access control mechanism
• A strong understanding of Unix DAC (Discrentionary Access Controls) and their impact on the security model upheld by dbus and other daemons
• Experience with dm-verity, secure boot implementations and a strong understanding of signed, authenticated code execution in both a working and theory context
• Strong ability to rapidly learn, understand adopt new functionality or code
• Understanding of SBOM's, their generation, and copyleft licence compliance
• You understand the basics on PKCS#11 and understand how it can be leveraged to create secure production builds using offline HSM backed signing keys
• A security driven mindset, where you could comfortably explain a broad range of security architectural concepts, and actively work to propose new defence in depth improvements
• You understand exploit mitigations, such as CFI, SCS and taking advantage of hardware features such as BTI, PAC and MTE in Arm based platforms or equivalent
• You have a real world understanding of offensive exploitation, and can proactively advise and foresee architectural issues in existing and under development platforms
• You have a good understanding of how hardware based architectural decisions and features can impact and improve the security of your OS, such as TEE's, ARM SMMUv3, isolation of firmware and peripheral and input/output authentication

UK based with occasional travel to Central London and Harlow

Job Types: Full-time, Permanent

Pay: £30,000.00-£50,000.00 per year

Benefits:

• Flexitime
• Work from home

Application question(s):

• On aarch64, can you explain what code you might have running in EL3, EL2, EL1, EL0? You may answer in the context of any aarch64 based hardware/platform/SoC.

Work Location: Remote