System Developer - Cybersecurity

Are you looking for an opportunity to work with cutting-edge embedded security while helping build something new? Axis R&D is growing its Stockholm office, and we are looking for a Secure Boot Engineer to join Technologies, the department responsible for developing the product platforms at the heart of all Axis video surveillance products. If embedded systems, constrained resources, and cyber security are your thing, read on. Who is your future team? You will join the Common Core Platform team, part of the Product Platforms department within Axis R&D's Technologies organization. The Product Platforms department currently consists of four highly skilled and motivated R&D teams. Three of them are today entirely based in Lund, but Common Core Platform spans both Lund and Stockholm. All teams feature a great mix of junior and senior members. Our teams value personal growth, collaboration, and teamwork. If you're someone who enjoys making an impact and contributing to positive change, you'll feel right at home with us. We are now growing our Stockholm team to further strengthen our capabilities. The Common Core Platform team in Stockholm develops and configures software for some of Axis' next-generation video surveillance platforms. These platforms are built on ARTPEC, Axis' own system-on-chip, designed in-house. The platforms we develop are Linux-based and the development environment is also Linux. The team works on requirements, design, implementation, and validation of the boot, security and CPU subsystems. In addition to working closely with some of the Product Platform teams in Lund, the team also collaborates closely with the ASIC team based in our Stockholm office. What will you do as Secure Boot Engineer? In your daily work, you will typically engage in the following activities: Collaborate with ASIC design engineers to develop secure and efficient boot solutions Write and maintain robust, secure, reliable and high-quality code Design, implement, and use test environments to validate your code Participate in design reviews and technical discussions to ensure the quality and feasibility of solutions Stay informed about industry advancements related to secure boot and incorporate relevant trends into your work In this role, you will (together with some skilled colleagues) mainly be working in the following areas: BootROM and boot loader software (primary responsibility) Developing environment for pre-silicon development and validation (e.g. QEMU) Secure boot through all boot stages Firmware for subsystems with their own CPU core Who are we looking for: We are looking for a senior engineer with at least 5 years of working experience in embedded systems development. You are an analytical and dedicated person with a strong personal drive and an ability to work both unsupervised and as a part of a team. You have the ability to think ahead and design future-proof solutions. You possess strong attention to detail and take pride in developing code that meets the highest quality and security standards. Required qualifications: A Master's degree in Computer Science, Physics, Mathematics, Electrical Engineering, or a related field Experience in embedded C development, particularly close to hardware Knowledge and hands-on experience in secure development and testing practices Familiarity with version control systems and code review tools (preferably Git and Gerrit) Strongly preferred qualifications: A strong interest and expertise in the boot process of embedded devices, with prior experience in developing BootROMs and first-stage bootloaders Experience with ARM architectures and platforms Experience working with RTL simulation and related tools to verify BootROM functionality before silicon is available Experience using QEMU to build or maintain system simulation environments Basic understanding of how functional blocks in an ASIC are designed Additional valuable qualifications: Experience with Python and Rust development Experience developing or evaluating countermeasures against fault-injection attacks during the boot process The position is office-based and you will be located in Axis office in Stockholm, Sweden. What Axis has to offer We are a world leader in network video, where cutting-edge technology meets global impact. This is a unique opportunity to be part of building our new R&D office in central Stockholm. You'll enjoy the advantages of working at a small, agile site while also being part of a successful organization that is already the world leader in network video. Ready to Act? We go through applications continuously so don't wait - send in your application today! Vacation is important! At Axis we value work-life balance and that means that during summer many of us are on a well-deserved vacation. During this period of time, you can expect some delay in our response, but we will get back to you as soon as possible! In case of questions, please reach out to recruiting manager Erik Thored, Engineering Manager for the Common Core Platform team, at +46 46 272 1800.

Nordnet redefined the financial world as the first digital bank in Europe. Now we are about to do it again and the aim is to create the next generation of bank, in the cloud. We know that this requires great people, great teams, and great technology. Do you want to join us and build the new Nordnet? At Nordnet we want to democratize savings and investments by giving our customers access to the best tools and information whether you are a professional investor or a small saver. With modern technologies and speed of delivery, we are building the next generation investment platform. This is part of the role Nordnet is a company with tech as the primary focus. In our agile and autonomous teams, you will be working with engaged colleagues that love to share their knowledge. As a cloud security engineer, you will drive automation and integrate DevSecOps into our cloud-based platform by embedding security in Continuous Integration/Continuous Delivery (CI/CD) pipelines, enhancing infrastructure security and ensuring secure software development practices. As a Cloud Security Engineer acting autonomously and with a clear mandate, you will: Develop and enforce cloud and Infrastructure As Code (IaC) security policies. Improve cloud security monitoring by building and managing detections. Collaborate with engineering teams to ensure security best practices and Secure Software Development Life Cycle SSDLC (Shift-Left). Facilitate threat modelling sessions, secure code review and vulnerability assessments. Coordinate penetration testing efforts and track remediations. Enable developers to ship fast by automating security Balance security rigor with business agility; we don't just secure, we enable. This is you To succeed in this role, we believe that you take great pride in your work, are curious and continuously want to learn and grow. Believing in collaboration and discussing ideas and concepts with your colleague, you will serve as the first point of contact for our Platform teams as a Cloud Security Subject Matter Expert to enable the delivery of great products. As a Cloud Security Engineer, you have: Offensive security mindset ideally with former red teamer or penetration tester experience Knowledge of Google Cloud Platform (or equivalent experience with other Cloud providers) Google Security Command Centre (SCC) Google Kubernetes Engine (GKE) Identity and Access Management (IAM) Infrastructure As Code (Terraform) Github Ability to work independently and as part of a team Strong stakeholder management skills, ability to work with both technical and non-technical stakeholders Ability define and implement security requirements in cloud environments Experience with security best practices and vulnerability management process. Familiarity with programming and major frameworks (Java, Spring, React) What we offer Your expertise and contribution will be appreciated from day one Access to the latest AI tools with cutting edge models to support your daily work. Plenty of opportunities to grow as a security professional Competitive salary and compensation Opportunity to shape the architecture, influencing the security design of Europe’s next-generation digital bank from the ground up. Access to training opportunities such as professional certifications (e.g., GCP Security, OSCP, OSAI+, CISSP), industry conferences, and dedicated time for skills development. You won't just follow a checklist; you’ll have the mandate to build and own your security automation roadmap. We offer you the opportunity to work in a Nordic environment with a strong focus on delivery, product development and technology. Our ambitions are high and you will embark on a fast and challenging journey together with a skillful team of sharp and committed colleagues. Our teams are autonomous and embrace the agile way of working. Culture is built and cared for, each day by everyone. We’re proud of ours. Having a flat organization where anyone can talk to anyone creates a warm and friendly atmosphere worth protecting. We believe in a culture where every effort counts and where everyone is being recognized. A culture embracing our core values – passion, simplicity and transparency on all levels, no matter who you are or what you do. We are over 900 employees located in Stockholm, Oslo, Helsinki, Copenhagen and Frankfurt. Visit us on: career.nordnetab.com/pages/engineering Learn more about Nordnet in our brand movie This is Nordnet, that describes our identity. Questions & Applications Please note that we will start reviewing applications after the summer holidays. To ensure a fair process and that your data is handled securely, we only accept applications through our recruitment system, applications sent via email will not be considered. If you have questions, please contact Hiring Manager Ralph Benton at ralph.benton@nordnet.se We want to inform you that Nordnet conducts mandatory credit and background checks, as well as drug testing as a part of our recruitment process. We look forward to receiving your application!