Total 4 Legal / Public / Security job vacancies in Bengaluru

Renesas has a growing presence in India with HC approaching 1000+ and significant presence with active government and university collaboration as well as OSAT footprint (JV with CG India). With the growing importance of India as a market (Growing semiconductor market and government goals / mandates of localization needs) and talent hub, our division’s (India for India) mission is to grow India market. We aspire to create products (SoCs, Software, Power and Analog chips etc) which serve needs for local market. Renesas is a leading electronics supplier globally, and this is a unique opportunity to directly influence the future products which will be offered to our customers in a new, fast growing and large Indian market with specific needs and applications.

Are you an experienced embedded systems expert passionate about driving innovation in automotive technology? Join our Application Engineering team, where you’ll work in shaping the usability and functionality of our automotive microcontroller. Your experience will help improve existing solutions, create proof of concepts, and actively participate in the design, deployment, and optimization of embedded systems for automotive applications.

We are a team of enthusiastic engineers who thrive on collaboration and innovation. Together, we tackle real-world challenges with code, enabling Renesas to deliver outstanding products. If you’re excited to get in touch with embedded systems and want to make a meaningful impact, we’d love to have you on our team!

Key Responsibilities :

• Technical Ownership: Drive the development of complex embedded applications and reference designs using Renesas MCUs, with a focus on security and secure communication in automotive applications.
• Embedded Architecture and Firmware Expertise: Provide deep technical direction on low-level embedded programming, real-time operating systems, hardware abstraction layers, and system performance optimization.
• Customer Enablement: Serve as a senior technical advisor to strategic automotive customers, supporting integration and deployment of MCU solutions within their systems.
• Marketing and Sales Support: Offer efficient technical assistance to our marketing and sales teams during design activities, ensuring successful implementation and integration.
• Provide technical training to FAE, Sales, partners, and customers.
• Cross-Functional Collaboration: Work closely with hardware and software teams to ensure cohesive, robust, and scalable solutions.

We are seeking a Security Firmware Engineer to design, implement, and maintain security‑critical components in embedded firmware for next‑generation storage and controller products. This role focuses on device‑level security, including secure firmware update, lifecycle management, debug port control, Root of Trust (RoT) interactions, and protection of critical assets such as keys, OTP, and credentials.

The ideal candidate has strong low‑level firmware expertise combined with hands‑on experience in embedded security architectures and secure system design.

Key Responsibilities

Security Firmware Architecture & Development

• Design and implement security layers within device firmware, aligned with product security requirements and ASIC security IP capabilities
• Integrate firmware with Root of Trust (RoT) subsystems, including support for both hardware‑based and firmware‑based RoT models where applicable. 
• Ensure secure handling of cryptographic material and prevention of unauthorized access.
• Implement and integrate cryptographic primitives and related authentication and encryption flows used in firmware
• Work closely with hardware teams to leverage ASIC security IPs, HSMs, and secure key storage.
• Support security testing, threat analysis, and vulnerability mitigation during development and validation cycles.
• Participate in design reviews, security assessments, and risk evaluations.

You will be responsible for end‑to‑end validation of Security and Functional Safety (FuSa) features for Renesas R‑Car automotive SoCs. The role focuses on validating secure boot, cryptographic services, safety mechanisms, and system‑level robustness across Linux, QNX, Android and RTOS environments on heterogeneous multi‑core SoCs.
You will work closely with BSP, firmware, hardware, and safety/security architecture teams to ensure production‑ready, audit‑compliant platforms for next‑generation IVI, ADAS, and fusion products.

•  Relevant working experience

• Strong system‑level understanding of secure boot and firmware architecture, QM vs safety domain partitioning, and multi‑core heterogeneous SoC behaviour
• Hands‑on experience in Security and Functional Safety (FuSa) validation for automotive SoCs
• Strong understanding of secure boot, cryptography, and ISO 26262 safety concepts
• Validation of X5H secure boot chain (BootROM → IPL → TF‑A → OP‑TEE → OS)
  Validation of RSIP‑M / RSIP‑E (HSM) including key provisioning, lifecycle states, and hardware crypto
• Validation of OP‑TEE and Trusted Applications, including secure storage (RPMB on UFS/eMMC)
• Execution of negative, robustness, and tamper testing (authentication failures, corrupted images)
• Validation of secure firmware loading across A‑core, R‑core, SCP, and Safety Island
• Validation of ISO 26262 safety mechanisms targeting ASIL‑B / ASIL‑D
  Validation of startup tests (LBIST, memory tests, watchdogs), ECC, and E2E protection
• Safety Island boot and runtime validation
• Fault injection and failure‑mode testing with analysis of fault detection and reaction paths
• System‑level validation on Linux (Yocto BSP), QNX Hypervisor, and RTOS / SafeRTOS / FreeRTOS
• System integration validation across heterogeneous multi‑core SoCs, ensuring correct partitioning between QM and safety domains
• Debugging and analysis of boot failures, safety events, and security violations using logs and low‑level traces
• Development and execution of system‑level validation plans, test cases, automation, and reports
• Contribution to security and safety validation evidence for internal reviews and customer audits
• Hands‑on experience with Git/Gerrit, Yocto build systems, JTAG and system‑level debugging tools, and security and functional safety validation tooling such as fault injection and negative testing

We are looking for a Senior Security Analyst with strong hands-on experience in email security, Microsoft security technologies, vulnerability management, SIEM monitoring, and incident response. The ideal candidate must have practical experience defending organizations against phishing, impersonation/BEC attacks, endpoint threats, and other cyber threats while continuously improving the organization’s security posture.

Key Responsibilities

Email Security

• Manage and optimize Proofpoint and Microsoft Defender for Office 365.
• Design and implement anti-phishing, impersonation, and BEC protection policies.
• Investigate phishing emails reported by users, perform header and URL analysis, and take remediation actions.
• Identify emerging email-based attack patterns and implement preventive controls.

Microsoft Security & Identity

• Secure Exchange Online, Microsoft Entra ID, and Microsoft 365 environments.
• Implement and manage Conditional Access policies, identity protection policies, and authentication security controls.
• Support implementation of Zero Trust security architecture.

Vulnerability Management

• Perform vulnerability scanning and remediation for Windows servers, Linux servers, and endpoints.
• Use tools such as Tenable or Qualys to identify, prioritize, and track vulnerability.
• Work with infrastructure teams to ensure timely remediation and validation.

Endpoint Security

• Investigate alerts from EDR solutions such as Sophos or Microsoft Defender for Endpoint.
• Analyze endpoint threats and coordinate containment and remediation actions.

SIEM & Security Monitoring

• Monitor and manage SIEM platforms such as Microsoft Sentinel, Wazuh, or similar.
• Develop and tune detection rules, alerts, and dashboards.
• Perform log analysis, threat detection, and investigation of security alerts.

Incident Response & Forensics

• Participate in security incident response and digital forensic investigations.
• Perform root cause analysis and recommend security improvements.

Risk & Third-Party Security

• Conduct security risk assessments across infrastructure and applications.
• Perform third-party/vendor security assessments and identify potential risks.