Embedded DevSecOps Engineer (Embedded Systems & IoT)

Job Description
Work Location: California 
Local Candidates are only prefered 

We are looking for an Embedded DevSecOps Engineer with strong experience in Embedded Systems and IoT environments rather than traditional pure software-based systems. The ideal candidate should have hands-on expertise in secure software delivery, code quality, compliance, and DevSecOps practices within regulated embedded product environments.

Key Requirements

• Strong experience working with Embedded Systems and IoT platforms.

• Experience working on embedded systems environments as opposed to purely software-based systems.

• Hands-on experience with Code Scanning and implementation of secure coding standards such as MISRA, preferably implemented as a Jenkins Node.

• Experience working with regulated machines/systems and implementing appropriate security practices and compliance standards.

• Experience creating and managing Software Bill of Materials (SBOM) to expose system dependencies and vulnerabilities.

• Knowledge and experience in vulnerability analysis, dependency tracking, and secure software supply chain practices.

• Experience with DevOps and CI/CD pipelines in embedded environments.

• Experience with Hardware-in-the-Loop (HIL) testing.

• Experience with security testing for embedded or IoT devices.

Required Tools & Technologies

Experience with the following tools is highly preferred:

• VectorCAST

• Coverity

• Linters

• JFrog

• Black Duck

• Jenkins

• Standard DevOps and CI/CD toolsets

Preferred Qualifications

• Strong understanding of embedded software development lifecycle (SDLC).

• Experience implementing security best practices within embedded or regulated environments.

• Ability to collaborate with software, firmware, QA, and security teams to ensure secure and compliant product delivery.

• Experience supporting secure build, release, and deployment processes for embedded platforms.