C

Camlin

Energy monitoring and infrastructure optimization

DevSecOps Embedded Software Security Engineer

Full-TimeUpdated on 10/15/2026
No salary listed
Mid
Kraków, Poland
HybridHybrid work model; at least one interview will take place onsite in the Kraków office.
CybersecuritySecurity Engineering & Architecture

About the job

Requirements
  • Experience developing, testing, or securing embedded software in C or C++, and scripting in Python.
  • Experience with Embedded Linux and Yocto, including package composition, build artifacts, and update mechanisms.
  • Practical knowledge of secure boot, firmware signing, cryptographic key handling, device identity, and secure firmware updates.
  • Experience with software composition analysis (SCA) and static application security testing (SAST) tools such as SonarQube, Black Duck, or equivalent, including investigating and remediating findings.
  • Understanding of Software Bill of Materials (SBOM) formats and workflows, including CycloneDX or SPDX.
  • Ability to analyze embedded attack surfaces, debug security issues, and communicate actionable findings to software engineers.
  • Working knowledge of Git-based development and automated build pipelines as they relate to secure, traceable product releases.
  • Strong understanding of embedded cybersecurity principles, including least privilege, defense in depth, secure defaults, trust boundaries, and attack-surface reduction.
  • Working knowledge of the Cyber Resilience Act (CRA), Radio Equipment Directive (RED) cybersecurity requirements, and IEC 62443, including secure development lifecycle and component-level security concepts.
  • Experience applying secure software development lifecycle practices such as threat modeling, security requirements, design review, vulnerability management, security testing, and release evidence.
  • Knowledge of secure communication protocols and applied cryptography, including TLS, certificates, authentication, encryption, and key lifecycle considerations.
Responsibilities
  • Apply Information Security Management System (ISMS)-defined secure development workflows and support engineering teams with threat modeling, security requirements, secure design reviews, secure coding, access control, secure update mechanisms, and product security documentation aligned with CRA, RED, and IEC 62443.
  • Configure and run SCA, SAST, and other appropriate security analysis tools for embedded software, firmware, and build outputs.
  • Triage security findings, assess exploitability and product impact, support remediation, and prepare actionable vulnerability records aligned with CRA and IEC 62443 vulnerability-handling requirements.
  • Monitor relevant vulnerability disclosures affecting third-party components and coordinate product impact assessments.
  • Perform or coordinate white-box and grey-box security testing of firmware, Embedded Linux systems, device interfaces, communication protocols, and update mechanisms.
  • Validate security controls against product requirements, RED Article 3.3(d/e/f), and applicable IEC 62443 component requirements.
  • Document reproducible findings, work with developers on remediation, and verify fixes before release.
  • Generate, validate, and maintain SBOMs for embedded product releases.
  • Review third-party and open-source components for known vulnerabilities, provenance, and license obligations, and maintain evidence required for CRA compliance and supply-chain transparency.
  • Support secure boot, firmware signing, image verification, anti-rollback, and secure update mechanisms.
  • Support certificate provisioning, device identity, key-management tooling, and secure device onboarding in accordance with ISMS-defined controls.
  • Review the secure handling of secrets and protected configuration across development, manufacturing, and field-service workflows.
Desired Qualifications
  • Experience with hardware-backed security features such as TPMs, secure elements, trusted execution environments, or microcontroller security functions.
  • Experience with embedded penetration testing, protocol analysis, fuzzing, or firmware reverse engineering.
  • Familiarity with CVE/CVSS, coordinated vulnerability disclosure, and product security incident response.
  • Experience producing security assurance evidence for regulated or industrial products.
  • Relevant product security or embedded security certification.

About the company

Camlin provides advanced energy monitoring and management solutions to optimize infrastructure and improve returns for energy operators. The company uses technologies such as artificial intelligence, machine learning, robotics, and materials science to address challenges in the energy sector, with a focus on Distribution Network Operators (DNOs). Its products include smart monitoring systems and fault detection and management strategies, delivered alongside related services. Revenue comes from selling these monitoring systems and ongoing services that help clients achieve higher operational efficiency and reliability of their networks. Camlin differentiates itself through a global team of data scientists, researchers, and engineers who continuously advance its solutions, aiming to improve customer outcomes and maximize the efficiency and reliability of energy networks.

Company Size

201-500

Company Stage

Grant

Total Funding

$420K

Headquarters

Lisburn, United Kingdom

Founded

2011

Get referred to Camlin

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Terra-Gen expanded Camlin monitoring on August 14, 2026 across Texas and California assets.
  • Camlin won Vattenfall Renewables UK’s five-year transformer monitoring deployment in February 2026.
  • Grid modernization demand is rising, and Siemens Energy is paying for Camlin’s software-enabled monitoring.

What critics are saying

  • Regulatory approval still governs the Siemens Energy deal, with closing targeted by December 2026.
  • Camlin’s standalone identity ends inside Siemens Energy, risking product overlap and leadership dilution.
  • Utility spending concentration leaves Camlin exposed if Terra-Gen, Vattenfall, or DNO renewals stall.

What makes Camlin unique

  • Camlin’s TOTUS monitors transformers with DGA, partial discharge, bushing, and through-fault analytics.
  • Its Northern Ireland engineering base and 650-person global team sell utilities predictive fault detection.
  • Siemens Energy agreed June 2, 2026 to buy Camlin for digital grid depth.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Life Insurance

Hybrid Work Options

Gym Membership

Flexible Work Hours

Growth & Insights and Company News

Headcount

6 month growth

-31%

1 year growth

-25%

2 year growth

-35%
LinkedIn
Sep 20th, 2026
#mergersandacquisitioins #siemensenergy #teampurple | Stefan Volz

The acquisition of the Camlin Group has closed on August 1st. Happy to have the Camlin team on board. #mergersandacquisitioins #siemensenergy #teampurple

Yahoo Finance
Aug 20th, 2026
Callan Power to acquire Williston Basin assets for $252M net cash flow with ex-Northern Oil and Gas CEO Michael Reger

Callan JMB's subsidiary Callan Power is acquiring oil and gas assets from Reger Oil for development in the Williston Basin. Michael Reger, former CEO and founder of Northern Oil and Gas, will become president of Callan Power and join Callan JMB's board. The acquisition includes a 23-well Red River drilling programme scheduled from May 2027 through March 2029. Callan Power will hold a 75% working interest, with Chandler Energy serving as operator with 25%. The company projects the programme will generate approximately $252 million in cumulative net operating cash flow over the wells' productive life. The initiative is forecast to achieve positive operating cash flow in its first drilling year, reaching approximately $42 million in annual net operating cash flow by 2029. Projections assume $75 per barrel oil prices and estimated ultimate recovery of approximately 7.3 million gross barrels across the programme.

Transformer Technology
Aug 14th, 2026
Camlin energy and Terra-Gen expand partnership on Transformer Monitoring.

Camlin energy and Terra-Gen expand partnership on Transformer Monitoring. 14 Aug 2026 Camlin Energy is expanding its collaboration with Terra-Gen to provide transformer monitoring across solar, wind and energy storage projects in Texas and California. The companies established an agreement in April 2025 covering monitoring technology, services and support. The programme uses TOTUS Total Transformer Monitoring, including dissolved gas analysis (DGA), partial discharge detection, bushing monitoring and through-fault current analysis. Jessie Nevarez, Terra-Gen's High Voltage general manager, said: "As we continue to expand our renewable energy portfolio, maintaining the reliability of our assets is essential. Camlin's monitoring technology and services provides us insight that helps us continue to operate efficiently while protecting the long-term performance of our infrastructure." Keith Redfearn, President & CEO of Camlin Americas, added: "Terra-Gen is a leader in the clean energy production and we are proud to support them. Our monitoring solutions and services are designed to help operators make informed decisions that protect assets, improve performance and strengthen the resilience of the grid." The programme is supported by Camlin's data interpretation and technical services, with a team located near Terra-Gen's Southern California sites.

Safer Highways
Jul 22nd, 2026
Siemens Energy charts new era with Omterra rebrand as digital grid ambitions accelerate.

Siemens Energy charts new era with Omterra rebrand as digital grid ambitions accelerate. Energy technology giant prepares to retire the Siemens name while strengthening its position through strategic acquisitions and investment in next-generation grid solutions. Siemens Energy has unveiled plans to adopt the new corporate identity Omterra, bringing both Siemens Energy and Siemens Gamesa under a single global brand as the company prepares for its next phase of growth following its separation from Siemens AG. The rebrand, which will be introduced in stages from later this year, represents the final milestone in a transition that began when Siemens Energy became an independent company in 2020. While the business has continued to operate under the Siemens name through a licensing agreement, that arrangement has always been temporary. The new name combines the concepts of "all" and "land", reflecting what the company describes as its worldwide presence, engineering expertise and commitment to delivering reliable energy infrastructure across the globe. Independent identity reflects stronger business position. The announcement comes at a time when Siemens Energy says it has emerged from a challenging period in a significantly stronger position. In recent years, the company has navigated well-publicised quality issues within its wind turbine business, Siemens Gamesa, while simultaneously benefiting from rapidly increasing global demand for electricity transmission infrastructure, grid technology and conventional power equipment as nations accelerate electrification and the transition to lower-carbon energy systems. Christian Bruch, President and Chief Executive Officer of Siemens Energy, said the timing reflects both the expiry of the Siemens branding agreement and the company's improved financial and operational performance. He said the business had strengthened its strategic position, increased profitability and earned greater confidence from customers and investors, making it the right moment to establish a fully independent identity. Bringing one brand to an increasingly integrated energy market. One of the most significant aspects of the rebranding programme is the decision to retire the long-established Siemens Gamesa name. Although the wind turbine manufacturer has operated within Siemens Energy since the spin-off, it has continued to trade independently across the renewable energy sector. Moving both businesses under the Omterra brand is expected to create a more unified identity as major energy projects increasingly combine multiple technologies, from offshore wind and gas-fired generation to high-voltage transmission, grid automation and digital energy management. The company believes presenting a single brand better reflects the integrated nature of modern energy infrastructure projects. Importantly, Siemens Energy has stressed that customers, suppliers and employees should not expect any disruption to existing operations as the new identity is introduced progressively across facilities, products and corporate communications. Digital grid strategy strengthened through Camlin acquisition. The rebranding announcement coincides with Siemens Energy's agreement to acquire Northern Ireland-based technology specialist Camlin Group, a move that significantly strengthens its digital grid portfolio. Subject to regulatory approval, the acquisition is expected to complete before the end of 2026. Camlin Group develops advanced monitoring, analytics and asset digitalisation technologies used by electricity network operators to improve reliability, predict equipment failures and enhance grid performance through real-time data. With electricity networks facing increasing pressure from ageing infrastructure, rising electricity demand and the rapid expansion of renewable generation, digital monitoring technologies are becoming an increasingly important part of modern grid management. Financial details of the acquisition have not been disclosed. Expanding capability for the energy transition. Headquartered in Lisburn, Camlin employs around 650 people and generates annual revenues exceeding £90 million. Since its formation in 2010, the company has established operations across Europe, North America, Asia and Australia, providing engineering and digital technology solutions for the energy and rail sectors. Tim Holt, Member of Siemens Energy's Executive Board, said expanding and digitalising electricity networks would be critical to future energy security and economic growth. He said Camlin's expertise in intelligent monitoring and software-based analytics would complement Siemens Energy's existing capabilities and help customers move from reactive maintenance towards predictive, condition-based asset management. Building the next chapter. Maria Ferraro, Chief Financial Officer and Chief Inclusion & Belonging Officer, described the rebrand as the beginning of a new chapter rather than a departure from the company's heritage. She said the Siemens legacy would continue to inspire the business, but that Omterra would provide a platform for the company's future ambitions as it continues to invest in technologies supporting the global energy transition. As Omterra branding begins appearing across products, facilities and customer communications over the coming months, the company hopes the new identity will symbolise a business that has completed its transition from industrial spin-off to one of the world's leading independent energy technology providers.

Siemens Energy
Jun 3rd, 2026
Siemens Energy expands capabilities with Camlin Group acquisition

Siemens Energy has reached an agreement to acquire Camlin Group, a Northern Ireland-based specialist in grid monitoring, analytics and asset digitalization technologies. The acquisition will expand Siemens Energy’s digital grid portfolio at a time of accelerated global investment in electricity network.