Systems Security Software engineer

About the role

Blueprint is seeking a technical expert to build and refine a platform for automated firmware security analysis. You will work at the intersection of compiler engineering, machine learning, and security research to identify vulnerabilities and harden firmware systems.

Key facts

What you'll do

• Create and maintain automated pipelines for discovering firmware vulnerabilities.
• Develop low-level tools using Python, C++, and LLVM.
• Write compiler passes to transform firmware into LLVM Intermediate Representation.
• Build and optimize fuzzing harnesses to increase code coverage.
• Analyze crashes and perform root-cause investigations.
• Refine AI-assisted workflows to classify firmware and generate security artifacts.
• Debug firmware rehosting environments.
• Design CI/CD workflows and scalable testing infrastructure.
• Collaborate with security researchers and software engineers on architecture and code reviews.

Requirements

• Bachelor degree in Computer Science, Electrical Engineering, Computer Engineering, or equivalent practical experience.
• 7+ years of professional experience in systems software development with C or C++.
• 5+ years of experience in compiler development, LLVM infrastructure, or program analysis.
• 3 to 5+ years of experience in application security, vulnerability research, or fuzzing.
• Proficiency in developing static analysis tools, code transformation frameworks, or compiler passes.
• Deep understanding of compiler optimization and LLVM IR.
• Experience debugging complex system behaviors and memory corruption.
• Proficiency in Python for pipeline and tool development.
• Experience working in Linux environments, Git, and modern development workflows.

Nice to have

• Background in embedded systems, bare-metal development, or firmware security.
• Knowledge of hardware abstraction layers, MMIO, firmware rehosting, or firmware architectures.
• Experience with fuzzing tools like AFL, AFL++, or libFuzzer.
• Familiarity with sanitizers such as ASan, MSan, or UBSan.
• Experience with security frameworks like CodeQL, call graph analysis, or dataflow analysis.
• Background in AI integration, LLMs, or large-scale engineering automation.
• History of contributing to open-source projects.

Skills & tools

• C, C++, Python, LLVM, LLVM IR, Git, Linux, CI/CD.

Practical notes

• Salary range for Washington State is $60-70/hr.
• Benefits include medical, dental, vision, 401k, FSA, parental leave, and PTO.
• Blueprint is an equal opportunity employer.
• For application accommodations, contact recruiting@bpcs.com.