10 Senior Embedded Security Engineer – Linux / Android Platforms

Company Description The Bosch Group is a leading global supplier of technology and services. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With technology that is “Invented for life,” Bosch wants to help improve quality of life and conserve natural resources. The Bosch Group comprises Robert Bosch GmbH and its roughly 490 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch’s global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch’s innovative strength is key to the company’s further development. Bosch Global Software Technologies Company Limited (BGSV) is 100% owned subsidiary of Robert Bosch GmbH, offering end-to-end Engineering, IT, and Business Solutions. Starting its operation from 2010 at Etown 2 in HCMC, BGSV is the first software development center of Bosch in Southeast Asia. BGSV nowadays have over 4,000 associates, with a global footprint and presence in the US, Europe, and the Asia Pacific region. With our unique ability to offer end-to-end solutions that connect sensors, software, and services, we enable businesses to move from the traditional to digital or improve businesses by introducing a digital element in their products and processes. BGSV currently operates from three offices located at the following addresses: 1. Etown Building – 364 Cong Hoa Street, Ward 13, Tan Binh District, Ho Chi Minh City, Vietnam 2. OfficeHaus Building – 32 Tan Thang Street, Son Ky Ward, Tan Phu District, Ho Chi Minh City, Vietnam 3. Capital Place Building – 29 Lieu Giai Street, Ngoc Khanh Ward, Ba Dinh District, Hanoi, Vietnam Job Description About the Role We are looking for 10 Senior Embedded Security Engineers to design, implement, and validate end-to-end security solutions on modern embedded platforms. This role is open to candidates from multiple domains, including Automotive, IoT, Mobile Devices, and Embedded Systems. If you have hands-on experience securing Linux / Android-based systems, SoCs, or connected devices, and are interested in working on automotive-grade platforms such as Infotainment (IVI) and ADAS, we strongly encourage you to apply. You will work on modern SoC platforms (e.g. Qualcomm, Renesas, TI, Marvell) running Android Automotive, Linux, QNX, or AUTOSAR-based systems, contributing to secure, scalable, and production-ready embedded solutions. Main Responsibilities 1. Security Architecture & Engineering • Design and implement end-to-end security features for embedded platforms, including: Secure Boot, Trusted Execution Environments (TEE), Secure storage, Secure update mechanisms, Secure communication, etc... • Contribute to security architecture definition for embedded and connected systems. 2. Threat Modeling & Reviews • Perform security architecture reviews and threat modeling for infotainment, ADAS, IoT, or connected device platforms. • Identify risks, define mitigation strategies, and drive security improvements early in the development lifecycle. 3. Security Implementation & Hardening • Implement security hardening for Linux / Android / QNX systems. • Conduct secure code reviews and collaborate with development teams to address vulnerabilities. • Support integration of access control and system hardening mechanisms (e.g. SELinux, AppArmor). 4. Testing & Validation • Perform security testing and validation, including: Static and dynamic analysis, Fuzzing, Penetration testing • Validate security features on real hardware and production-like environments. 5. Process & Compliance • Develop and maintain security requirements and security engineering processes (SEP). • Support compliance with relevant security standards and best practices. Qualifications Mandatory Qualifications • Educational background: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cryptography, or a related technical field • 7-15 years of overall experience, with at least 2-5 years of experience in embedded software development, system software, or security engineering (backgrounds from Automotive, IoT, Mobile Devices, Consumer Electronics are all welcome) • Practical experience with Linux and/or Android platforms, particularly in BSP, middleware, system services, or other low-level system components. • Solid understanding of cybersecurity fundamentals, including cryptography, secure communication protocols, secure coding practices, and security testing principles. • Hands-on experience implementing or supporting embedded system security features, such as secure boot, system trust mechanisms, secure storage, secure update/OTA, and secure communication between components or devices. Nice-to-Have (Any of the following will be a strong advantage, but are not mandatory) • Good knowledge or hands-on experience in development with modern SoC architectures, such as: Qualcomm, Renesas (RCAR), TI, etc. • Experience in QNX development • Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.) • Good knowledge or hands-on experience in following areas:Secure Boot.Hardware-back security such as Trustzone (Arm TrustZone, OP-TEE, etc.), HSM, etc.Storage security (disk encryption, dm-verity, etc.).Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec, etc.).Access control & hardening (SELinux, AppArmor, etc.).Signing tools (Android signing, secure boot signing, etc.).Linux / Android / QNX security development/hardening.Network security, firewall.Security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.). Additional Information WHY BOSCH? Because we don't just follow trends, we create them. Because together we turn ideas into reality, working every day to make the world of tomorrow a better place. Do you have high standards when it comes to your job? So do we. At Bosch, you will discover more than just work. Benefits and Career Opportunities • Working in one of the Best Places to Work in Vietnam and Top 30 of the Most Innovative Companies all over the world • Join a dynamic and fast-growing global company (English-speaking environment) • Engage in our diverse training programs which surely help strengthen both your personal and professionalism • 13th-month salary bonus + attractive performance bonus (you'll love it!) + annual performance appraisal • 100% monthly salary and mandatory social insurances in 2-month probation • Meal, Commuting and Parking allowance • Premium health insurance for you and 02 family members • 15++ days of annual leave + 1 day of birthday leave • Flexible working time • Free in-house entertainment facilities and sport activities: football, badminton, yoga, Aerobics…. • Vibrant culture: Enjoy team-building events, company trips, year-end parties, tech talks, charity & CSR initiatives • Onsite opportunities: short-term and long-term assignments