Middle/Senior Embedded Firmware Developer

Description

Our client is innovative manufacturer of medical devices in the United States which produces a devices and software applications.

At this project, you will have a great opportunity to be involved into the full development life cycle of medical software which is intended to help individuals by processing certain information taken from medical devices to identify health trends and to track daily activities. As additional there are opportunities to work with medical devices, in scope of end-to-end testing.

Requirements

• 5+ years of work experience
• Proficiency in C/C++ and good coding style, with good commenting habits
• Experience interacting with software debugging in an embedded environment (IAR Embedded Workbench for Arm)
• Prefer familiarity with software development lifecycle in a regulated environment (FDA preferred)
• Familiarity with version control systems (Git), and release methodologies
• Familiarity with MISRA or other coding standards is a plus
• Disciplined and detail-oriented; consistently delivers robust, readable code
• Excellent proactive communication skills, both verbal and written, including through collaboration tools (e.g., Jira, Confluence, Teams)
• Excellent analytical, problem solving skills and ownership of deliverables
• Electrical Engineering
• Experience with low-level embedded serial communication protocols such as UART, and USB.
• Strong knowledge of secure coding practices, authentication/authorization mechanisms, encryption standards, and vulnerability management.

Job responsibilities

• We are seeking a detail-oriented and collaborative firmware engineer to support development of cybersecurity updates to an IoT medical device that detects cardiac arrhythmias. The role includes:
• Updating existing firmware to include cybersecurity enhancements such as encryption, updating SOUP components to current versions, and logging cyber events
• Collaborating remotely with California-based firmware engineers to ensure designs and implementation align with the existing architecture
• Writing and executing unit testing
• Resolving static code analysis warning and errors
• Working hands-on with company-provided hardware shipped to you for development and debugging, using appropriate lab setup (power supply, static mat, etc.)

Address all P1 cyber findings, centered around PEN testing findings (*additional P2+)

• Data at rest and transit
• Debug interfaces inaccessible in production environment
• Establish and verify authentication tags
• Create and store log files off device for event tracking
• Address anomalies with CWEs and vulnerabilities
• *11 year old SOUP to comply with latest 62304 standards
• *SOUP UFFS from 2020, need to be brought up to date
• *PWS API private tunneling setup
• * Safe storage of encryption keys, outside of code base