Bosch Global Software Technologies (BGSV)

Overview of job

About the Role

We are looking for 10 Senior Embedded Security Engineers to design, implement, and validate end-to-end security solutions on modern embedded platforms.

This role is open to candidates from multiple domains, including Automotive, IoT, Mobile Devices, and Embedded Systems.

If you have hands-on experience securing Linux / Android-based systems, SoCs, or connected devices, and are interested in working on automotive-grade platforms such as Infotainment (IVI) and ADAS, we strongly encourage you to apply.

You will work on modern SoC platforms (e.g. Qualcomm, Renesas, TI, Marvell) running Android Automotive, Linux, QNX, or AUTOSAR-based systems, contributing to secure, scalable, and production-ready embedded solutions.

Main Responsibilities

1. Security Architecture & Engineering

• Design and implement end-to-end security features for embedded platforms, including: Secure Boot, Trusted Execution Environments (TEE), Secure storage, Secure update mechanisms, Secure communication, etc...
• Contribute to security architecture definition for embedded and connected systems.

2. Threat Modeling & Reviews

• Perform security architecture reviews and threat modeling for infotainment, ADAS, IoT, or connected device platforms.
• Identify risks, define mitigation strategies, and drive security improvements early in the development lifecycle.

3. Security Implementation & Hardening

• Implement security hardening for Linux / Android / QNX systems.
• Conduct secure code reviews and collaborate with development teams to address vulnerabilities.
• Support integration of access control and system hardening mechanisms (e.g. SELinux, AppArmor).

4. Testing & Validation

• Perform security testing and validation, including: Static and dynamic analysis, Fuzzing, Penetration testing
• Validate security features on real hardware and production-like environments.

5. Process & Compliance

• Develop and maintain security requirements and security engineering processes (SEP).
• Support compliance with relevant security standards and best practices.

Why BOSCH?

Because we do not just follow trends, we create them. Together we turn ideas into reality, working every day to make the world of tomorrow a better place. Do you have high standards when it comes to your job? So do we. At Bosch, you will discover more than just work.

Benefits and Career Opportunities

• Working in one of the Best Places to Work in Vietnam and Top 30 of the Most Innovative Companies all over the world
• English-speaking environment, with opportunity to be part of innovation team and work in global projects
• Onsite opportunities
• Engage in our diverse training programs which surely help strengthen both your personal and professionalism
• Flexible working time
• 13th-month salary bonus + attractive performance bonus (you'll love it!) + annual performance appraisal
• 100% offered salary and mandatory social insurances in 2-month probation
• 15++ days of annual leave + 1-day of birthday leave
• Premium health insurance for employee and 02 family members
• Lunch and parking allowance
• Good benefits of company activities such as: football, badminton, yoga, Aerobic, team building…

Mandatory Qualifications 

• Educational background: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Cryptography, or a related technical field
• 7-15 years of overall experience, with at least 2-5 years of experience in embedded software development, system software, or security engineering(backgrounds from Automotive, IoT, Mobile Devices, Consumer Electronics are all welcome)
• Practical experience with Linux and/or Android platforms, particularly in BSP, middleware, system services, or other low-level system components.
• Solid understanding of cybersecurity fundamentals, including cryptography, secure communication protocols, secure coding practices, and security testing principles.
• Hands-on experience implementing or supporting embedded system security features, such as secure boot, system trust mechanisms, secure storage, secure update/OTA, and secure communication between components or devices.

Nice-to-Have (Any of the following will be a strong advantage, but are not mandatory)

• Good knowledge or hands-on experience in development with modern SoC architectures, such as: Qualcomm, Renesas (RCAR), TI, etc.
• Experience in QNX development 
• Relevant certifications (CEH, CISSP, OSCP, SANS GIAC, etc.) 
• Good knowledge or hands-on experience in following areas:
  • Secure Boot.
  • Hardware-back security such as Trustzone (Arm TrustZone, OP-TEE, etc.), HSM, etc.
  • Storage security (disk encryption, dm-verity, etc.).
  • Secure communication protocols (TLS/DTLS, SSH, IPsec, MACsec, etc.).
  • Access control & hardening (SELinux, AppArmor, etc.).
  • Signing tools (Android signing, secure boot signing, etc.).
  • Linux / Android / QNX security development/hardening.
  • Network security, firewall.
  • Security testing & validation (fuzzing, static/dynamic analysis, penetration testing, etc.).