About the Role
We’re looking for an Embedded Software Engineer to help build and evolve an advanced platform that automates firmware security analysis using modern compiler technologies, fuzzing frameworks, and AI-assisted workflows.
In this role, you’ll develop scalable tools that transform firmware into analyzable intermediate representations, automate vulnerability discovery, and improve the accuracy and efficiency of security-analysis pipelines. You’ll combine systems programming, compiler engineering, firmware security, and machine-learning techniques to solve complex security challenges.
You’ll collaborate with engineers and security researchers to prototype new capabilities, prepare them for production, and support the development of a platform designed for future open-source release.
What You'll Do
- Design, develop, and maintain automated firmware security-analysis pipelines for vulnerability discovery.
- Build low-level tooling with C++, Python, and LLVM to analyze firmware at scale.
- Develop compiler passes and transformations that convert firmware into analyzable LLVM Intermediate Representation.
- Create, improve, and maintain fuzzing harnesses that maximize code coverage and uncover security vulnerabilities.
- Investigate crashes identified during fuzzing campaigns and perform root-cause analysis.
- Improve vulnerability-detection accuracy by reducing false positives and strengthening automated analysis workflows.
- Develop and enhance AI-assisted systems that classify firmware functionality and generate security-analysis artifacts.
- Debug firmware-rehosting environments and resolve issues affecting automated analysis.
- Collaborate with compiler engineers, software engineers, and security researchers to review architectures and validate security findings.
- Design scalable automation, testing, and continuous-integration workflows that improve development efficiency and platform reliability.
- Improve code quality through testing, documentation, dependency management, and engineering best practices.
- Contribute to release readiness, developer onboarding, and preparation for open-source release.
- Evaluate and integrate compiler, security, and AI technologies that strengthen platform capabilities.
What You'll Bring
- Bachelor’s degree in computer science, computer engineering, electrical engineering, or a related technical field, or equivalent practical experience.
- Seven or more years of professional experience developing systems software with C or C++.
- Five or more years of experience with LLVM, compiler infrastructure, compiler development, or program analysis.
- Three or more years of experience with fuzzing, vulnerability research, or application security.
- Experience developing compiler passes, static-analysis tools, or code-transformation frameworks.
- Strong understanding of LLVM Intermediate Representation and compiler-optimization concepts.
- Experience debugging low-level software, memory-corruption issues, and complex system behavior.
- Proficiency with Python for automation, tooling, or pipeline development.
- Experience working within Linux development environments.
- Strong problem-solving skills with the ability to debug across compiler, firmware, and systems-software layers.
- Experience with Git and modern software-development practices.
Preferred Qualifications
- Experience with firmware security, embedded systems, or bare-metal software development.
- Knowledge of firmware architectures, hardware abstraction layers, memory-mapped input/output, or firmware-rehosting techniques.
- Experience with fuzzing technologies such as libFuzzer, AFL, or AFL++.
- Experience with sanitizer technologies, including AddressSanitizer, UndefinedBehaviorSanitizer, or MemorySanitizer.
- Experience with static analysis, data-flow analysis, call-graph analysis, CodeQL, or similar security-analysis frameworks.
- Experience building developer platforms, continuous-integration automation, or large-scale engineering tooling.
- Familiarity with cross-compilation toolchains and embedded-development workflows.
- Experience integrating large language models or AI-assisted automation into developer or security tooling.
- Experience contributing to open-source software projects.
- Experience developing production-quality testing frameworks and automation infrastructure.
- Ability to succeed within a research-oriented environment while delivering production-ready software.
- Strong collaboration and communication skills across engineering and research teams.
Compensation
At Blueprint, we strive to offer competitive pay that reflects the value of our team members. Compensation for this role is influenced by a variety of factors, including skills, education, responsibilities, experience, and geographic market.
For candidates based in Washington State, the anticipated compensation range is $65.00 to $75.00 USD per hour. Please note that we typically do not hire new employees at the top of the posted range. Actual starting pay will be determined based on experience, skills, and internal equity. The final compensation and job title may vary depending on the selected candidate’s qualifications.
Location and Work Arrangement
Redmond, Washington
This is a hybrid role that requires three days per week onsite in Redmond.
