Embedded System Security Software Consultant

The Helsinki System Security Laboratory in Huawei has for almost a decade been active in translating theory into practice w.r.t. system protection features for Huawei mobile phones and other devices. Much of our work revolves around hardening OS kernels, driver subsystem and system runtimes, but we are also active in design e.g. system security services and secure debugging solution by applying cryptography. Many of our earlier projects today power the security of Huawei OS powered devices.

We're now looking for Senior Embedded System Security Software Engineer in mobile system security domain with successful industry experiences.

Position

Embedded System Security Software Consultant

Responsibility

As a senior Embedded System Security Software Engineer, you will be joining a team of system security experts who are responsible for innovating industry leading system security technologies of Huawei consumer products like smart phone, laptop, automotive and so on.

Huawei’s Harmony OS tries to bring some new ideas to our consumer, such as “New Architecture, New ecology and New experience”, so we hope our expert can contribute to this vision. We expect that you have very deep software development experience how to design system security features into the consumer industry and able to make your own plan on technologies and lead the technologies development, thus finally help Huawei CBG to build competitiveness on cyber security and user privacy protection, which aims to bring totally new security experiences to our customers.

Requirements

• Master in computer science with at least 10 years of software design and development experience in the field of mobile OS system security, such as OS system services and drivers, TA in TEE etc.
• Strong Background in embedded software and RTOS development, proficient in one or more programming languages such as Assembly/C/C++/Rust, proficient in ArmV7/8/9 architecture, familiar with its virtual memory architecture, instruction set, registers and other relevant SOC hardware knowledge.
• Strong development experience on developing Mobile OS system security services requiring Applied Cryptography (e.g. keystore/keymaster, gatekeeper, Fingerprint authentication, secure debugging and etc.)
• Product R&D level solid experience on Trusted Execution Environments (TEEs), Trusted Applications, GP specifications for the TEE. Hands-on development experience on developing TEE features, TAs and using TUI and biometrics in TA.
• Solid development experiences with Linux kernel driver (e.g. USB, Bluetooth, Wifi etc), and the ability to dive into USB related standards and specifications, Linux USB driver software subsystem, secure debugging is highly appreciated.
• Familiar with threat modeling and attack surface analysis; familiar with the causes of various vulnerabilities, especially memory-based vulnerabilities; familiar with exploitation approaches of various vulnerabilities and the state-of-the-art mitigation technologies in the industry.

This is a fix-term consultant position. The consultant shall be employed by Huawei's supplier.