Senior Software Engineer, Systems

About the role

Security & Compliance Engineering team at Mphasis focuses on securing embedded firmware and ensuring compliance with industry standards. The role designs threat models, integrates FIPS‑140‑2 validated cryptography, implements NIST SP 800‑193 firmware integrity measures, and prepares comprehensive security review packages. Bangalore office, on-site work model, with opportunities to influence product security architecture.

What you’ll do

• Conduct threat modeling and attack surface analysis for firmware components
• Integrate and validate FIPS 140‑2 cryptographic modules in Yocto builds
• Implement NIST SP 800‑193 firmware integrity measures
• Prepare and deliver security review packages for internal review boards
• Generate SBOMs and perform open‑source license compliance audits
• Review and sign‑off CI/CD signing pipelines and interface hardening
• Coordinate remediation responses and CVE posture reporting
• Support security penetration testing and export control assessments

What you’ll bring

• 4-6 years firmware security experience
• Proficient in threat modeling and attack surface analysis
• Strong knowledge of FIPS 140‑2 and cryptographic library integration
• Familiarity with NIST SP 800‑193 firmware integrity standards
• Experience generating SBOMs and conducting license audits
• Ability to prepare security review documentation and manage remediation
• Understanding of EU Cybersecurity Resilience Act is a plus
• Experience with HSM integration and signing infrastructure

Skills

Education

Bachelor's degree in Computer Science, Cybersecurity, or Electrical Engineering