Peter Uhrig

Responsible to overview compliance of ADT's embedded devices according to security best practices (IoT Security Foundation); define security policies, procedures and best practice documentation. Perform risk assessment through threat model to existing and new projects using STRIDE methodology and DREAD scoring. Perform penetration tests to ADT's embedded devices.

Software developer in C and C# for cable fault diagnostic instruments. Software developer for in-house PC test tools in C#. Define security policies for future compliance with cyber security standards for the energy industry (ISO 27001, NERC CIP). Leader of threat modeling and security risk assessment for two new projects, defining cyber security requirements, design documentation, implementation and test. Developer of secure bootloaders for different embedded platforms (AVR, STM32F4).

Firmware developer of low level drivers (GPIO, SPI, I2C) for the initial release of a medical IoT device, running Zephyr OS. Firmware developer of drivers for FRAM and Flash devices. Mentor fellow Junior developers over SDLC and best coding practices. Developed security framework proposal based on the IoT Security Foundation and compliant with FDA requirements. Trained Engineering managers and developers in security risk assessment.

Responsible to overview the secure development for embedded devices and applications, and compliance with regulatory and industry standards (PCI, IoT Security Foundation). Primary custodian and responsible of cryptographic keys and Hardware Secure Modules (HSM). Define application security policies, procedures and best practice documentation. Internal trainer in cryptography and application security. Perform threat assessment (STRIDE, DREAD). Programming languages: C. Tools: Black Duck, Coverity.

Develop secure bootstrap supporting cryptographic algorithms (AES, ECDSA, ECDH, SHA, RNG), key and certificate management, secure key injection. Leader and developer for banknote and coin device applications and communication protocols (UART, SPI, I2C, USB, CAN). Programming languages: C, Assembly. Tools: Perforce, IAR IDE, Keil IDE, In-house tools (e.g. serial monitors), lab equipment, JIRA, SAP. Microcontrollers: ST ARM (STM32F1, STM32L1, STM32F3, STM32F4).

Firmware developer of secure bootstrap, bootloader and diagnostic modules for payment devices. The bootloader supports firmware updates through different communication protocols over UART and USB. Programming languages: C, Assembly. Tools: Perforce, IAR IDE, Keil IDE, In-house tools (e.g. serial monitors), lab equipment, JIRA, SAP. Microcontrollers: Renesas, ST ARM.

Team leader and firmware developer for oven controls (Maytag, Whirlpool). Software developer test tools for lab automation. Object oriented firmware design. Programming languages: C, Assembly. Version control: Tortoise SVN. Issue tracking: Bugzilla. Software development: Renesas HEW, Freescale Code Warrior, LabWindows CVI. Lab equipment: Oscilloscope, multimeter, protocol debugging tools/simulators, thermal chamber. Business software: SAP. Microcontrollers: Renesas (M16C, R8C), Freescale (HC08, HC12).

Process Engineer responsible for the steering wheel molding area. Implement cost reduction solutions, e.g. reduce production waste. Implement production process improvements, e.g. visual factory, scrap measure and alert.

Design of programming and communication drivers for In-System-Reprogramming tools. Assembly code migration from Freescale's HC05 to HC08. Developer and Team leader of the software group in charge of developing a prototype for a remote keyless entry and immobilizer system. Software development based on Delphi's process compliant to CMM 3. Languages: C, assembly. Tools: NEC and Freescale IDE's, PVCS, Tortoise SVN, lab equipment. Microcontrollers: Freescale, NEC.