Senior Product Security Engineer
Bose Corporation4 days ago
Framingham, MA, USASenior
Base Salary
$143k - $196k/yr
Responsibilities
- Architect and design secure consumer electronics products that preserve data confidentiality and system integrity.
- Engineer ARM TrustZone secure applets and implement IoT device identity, roots of trust, cryptography, secrets, key management, and credential management.
- Implement intellectual-property protections including anti-reverse engineering, secure firmware distribution, secure boot, firmware encryption, and debug interface lockdown.
- Define security requirements, conduct assessments and testing, support security fixes, and advise engineering teams through architecture and code/design reviews.
- Improve vulnerability discovery and patching processes and lead responses to external security threats.
- Ensure product security compliance with applicable regulations and standards and support audits and certifications.
- Design and maintain private X.509 and JWK chains of trust for validating portable audio device authenticity.
- Collaborate with product firmware, DevOps, cloud engineering, manufacturing, and program management teams.
Requirements
- At least 6 years of industry experience in firmware development focused on security; an advanced degree may contribute toward experience.
- Experience developing for embedded systems and Linux platforms using C and C++.
- Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules.
- Experience building security applications and tools for firmware encryption and signing, secure asset provisioning, and developer enablement.
- Experience aligning embedded product security practices with EU CRA, NIST, ISO 27001, IEC 62443, or similar frameworks.
- Experience implementing embedded-system IP protection and anti-tamper mechanisms, including secure boot enforcement, firmware encryption, and hardware debug-port protection.
- Experience mitigating dependency and code-level defects involving memory management, input validation, timing attacks, broken authentication, and side channels.
- Experience with computer networking focused on security and IoT applications.
- Bachelor's degree in Computer Science or equivalent; a master's degree is beneficial.
Benefits
- Hiring range is $142,600-$196,000 for the primary work location in Framingham, Massachusetts; ranges may vary by location.
- Bonus programs, comprehensive health and welfare benefits, a 401(k) plan, exclusive wellbeing perks, and an employee discount are offered.