Senior Hardware Security Engineer

Details

Build the hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries. Set technical direction and develop security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution. Work closely with hardware, firmware, systems, platform, and security engineering teams to solve complex security challenges at the foundation of the computing stack.

Responsibilities

• Set technical direction and own architecture for security capabilities spanning hardware, firmware, systems software, and protected workload execution.
• Design and build architectures for hardware-rooted trust, attestation, trusted execution environments, and hardware-backed isolation.
• Architect attestation capabilities across hardware, firmware, host, and workload boundaries.
• Partner with hardware, firmware, and systems engineers on platform integrity, secure and measured boot, device identity, and hardware-rooted security capabilities.
• Design protected workload execution capabilities while maintaining trust throughout the workload lifecycle.
• Develop secure approaches for cryptographic keys, credentials, identity, certificates, and provisioning within trusted computing environments.
• Shape security across the lifecycle of trusted compute infrastructure, from provisioning and platform initialization through operation and decommissioning.
• Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution.
• Develop systems software, security tooling, and automation for reliable hardware-backed security capabilities at scale.
• Lead security-sensitive designs across organizational boundaries and translate hardware and systems risks into practical engineering decisions.
• Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering.
• Communicate trust models, security architecture, technical tradeoffs, and risks to engineers, technical leaders, and security leadership.

Requirements

• 6+ years of systems, firmware, hardware, or security engineering experience.
• Deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, trusted execution environments, confidential computing, or related technologies.
• Experience setting technical direction and owning complex security architecture across multiple layers of the hardware and software stack.
• Understanding of roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation.
• Experience designing or implementing attestation systems across hardware, firmware, host, and workload boundaries.
• Strong understanding of firmware and low-level systems security, boot chains, platform integrity, and hardware/software security boundaries.
• Strong understanding of cryptographic systems, key management, certificate lifecycle, secure credential management, and secure provisioning.
• Systems engineering experience developing low-level systems software, security tooling, firmware, or production automation using C, C++, Rust, Go, Python, or similar languages.
• Ability to threat model systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads.
• Experience leading ambiguous, cross-functional technical initiatives and influencing engineering direction across specialized disciplines.
• Experience developing or securing firmware, platform initialization, device security, or hardware-backed security mechanisms is valuable.
• Experience integrating hardware-rooted trust, attestation, or confidential computing with infrastructure, identity, key-management, or workload systems is valuable.
• Experience with bare-metal lifecycle security or securing large-scale compute environments is valuable.

Candidates for this U.S. position may need to qualify as U.S. Persons for export control purposes or otherwise be eligible for an applicable export license.