Phát triển, cứng hóa và bảo trì bootloader, secure boot chain, tích hợp phần cứng bảo mật cho zonal network controller.
Yêu cầu
4+ năm embedded C firmware, kinh nghiệm bootloader bảo mật hoặc security stack
Kinh nghiệm trực tiếp authenticated boot, chữ ký số, hash toàn vẹn image
Thành thạo NXP HSE/eHSM hoặc Secure Element SPI (STSafe-V500)
Am hiểu UDS ISO 14229 Service 0x27 Security Access và yêu cầu flash bảo mật
Trách nhiệm
Triển khai bootloader production cho zonal module (VBF/HEX flash, dual-partition, jump routine)
Xây dựng gate xác thực secure boot (RSA/ECC, TIM descriptor, hash, CUI/device_software_id stamping)
Tích hợp NXP HSE/eHSM và STSafe-V500 qua SPI cho quản lý khóa phần cứng
Cài đặt UDS Security Access (Seed/Key, state machine, 30s unlock delay, session gating) và OTA fault-tolerant (A/B bank switching, crash…
Có thì tốt
Kinh nghiệm tooling VBF/HEX image packaging
Hiểu thực hành automotive cybersecurity và quy trình lưu trữ khóa bảo mật
Lương và phúc lợi
Bảo hiểm FPT Care
Phụ cấp nghỉ hè hàng năm
Đào tạo tài trợ, chi trả 100% chi phí chứng chỉ
Chính sách nghỉ linh hoạt, khám sức khỏe hàng năm
Tóm tắt bằng AI từ JD gốc, đọc JD gốc trước khi ứng tuyển.
We are seeking Senior engineers who are responsible for developing, hardening, and maintaining the bootloader framework, secure boot chain, and hardware security integrations for zonal network controllers. You will work on bootloader implementations, UDS security access, image verification gates, and Hardware Security Module (eHSM / STSafe-V500) key management.
YOUR IMPACT:
Implement and configure production bootloaders across zonal target modules (supporting VBF and HEX flashing flows, dual-partition memory layouts, and bootloader-to-application jump routines).
Develop secure boot verification gates to validate authenticated image signatures (RSA/ECC), TIM descriptors (TIM#0/TIM#1), content hashes, and CUI / device_software_id readback stamping.
Integrate hardware security features using NXP Hardware Security Engine (HSE / eHSM) and external STSafe-V500 Secure Element ICs over SPI.
Implement UDS Security Access (Seed/Key protocol, security level state machines, 30s unlock delay handling, and session gating).
Support security key management features including SPAKE parameter handling, RKEK generation, and encrypted boot lock state transitions.
Implement fault-tolerant OTA firmware flashing routines, A/B partition bank switching, and crash recovery logic.
BASIC QUALIFICATIONS:
4+ years of embedded C firmware experience developing secure bootloaders or security stack components.
Direct experience with authenticated boot workflows, digital signature verification, and image integrity hashing.
Hands-on experience with hardware security modules (NXP HSE / eHSM or SPI-connected Secure Elements like STSafe-V500).
In-depth knowledge of UDS (ISO 14229) Security Access services (Service 0x27) and flashing security requirements.
PREFERRED QUALIFICATIONS:
Experience with bootloader development or VBF/HEX image packaging tooling.
Understanding automotive cybersecurity practices and secure key storage workflows.
WHAT COMPANY OFFERS • Competitive salary package based on skills and experience • FPT Care insurance plan tailored for FPT employees • Attractive annual summer vacation allowance • Sponsored training courses for personal growth and up to 100% coverage for certification costs • Global and inclusive workplace with monthly cross-cultural events • International exposure and career growth across global locations • Work-life balance benefits with a flexible leave policy and annual health check-ups to support employee well-being • Be part of our hugely international environment; we are currently working with the customer, where you can have many opportunities to work oversea • Other benefits following the Labor Laws
