Product Security Engineer (Hardware)

We are looking for a hardware-focused Product Security Engineer to join our Security and Certification team. Working closely with the hardware development team, you will analyze the security architecture of our RISC-V cores, hardware Root of Trust (RoT), firmware and SoC platform to support compliance with relevant security regulations and certifications, track the latest hardware attacks and turn that knowledge into concrete security tests and improvements for our designs.

This role focuses on security analysis of hardware architectures and their implementations. It suits someone who enjoys challenging hardware designs to make them stronger, enjoys going from a published attack to a working test against a real implementation and wants to grow in a technical and collaborative environment.

Key Responsibilities:

• Security Documentation: Document our platform's hardware security specification and support regulatory and certification compliance efforts.

• Vulnerability Analysis: Analyze the architecture, specifications, and implementation of our RISC-V cores, RoT, firmware and SoC platform to identify security weaknesses.

• Threat Research: Stay current with RISC-V security, hardware and platform attacks and emerging threats.

• Security Testing: Turn published attacks into security tests that validate our designs, and go beyond the state of the art by developing new attacks.

• Collaboration with Hardware Teams: Report findings, propose mitigations and work with the development teams to fix vulnerabilities and strengthen the platform's security.

RequirementsMust-Have

• Education: Master's degree in Electrical/Electronic Engineering, Computer Engineering, Computer Science, Cybersecurity or a related field.

• Experience: 2–5 years of industry or research experience in hardware security, computer architecture or low-level systems security.

• Computer Architecture: Solid understanding of RISC-V processor microarchitecture, ISA and SoC platform architecture.

• Hardware Attacks: Good knowledge of hardware attack vectors, including microarchitectural, physical and memory-based attacks, and of how they exploit weaknesses in processor and SoC designs.

• Low-Level Software: Experience with C and working knowledge of assembly, ideally RISC-V, to write attack proofs-of-concept and security tests.

• Technical Communication: Ability to write clear, well-structured security specifications, technical reports and vulnerability findings.

• Teamwork: Ability to work both independently and collaboratively within a diverse, inclusive team.

Highly Desirable

• Experience with open-source hardware security projects such as Caliptra or OpenTitan.