Senior Product Security Engineer
Bose Corporation2 months ago
Framingham, MA, USASenior
Base Salary
$143k - $196k/yr
Responsibilities
- Architect and design secure consumer electronics products that preserve data confidentiality and system integrity.
- Engineer ARM TrustZone secure applets and implement IoT device identity, roots of trust, cryptography, secrets, key management, and credential management.
- Implement intellectual-property protections including anti-reverse engineering, secure firmware distribution, secure boot, firmware encryption, and debug interface lockdown.
- Define security requirements, conduct assessments and testing, support security fixes, and advise engineering teams through architecture and code/design reviews.
- Improve vulnerability discovery and patching processes and lead responses to external security threats.
- Ensure product security compliance with applicable regulations and standards and support audits and certifications.
- Design and maintain private X.509 and JWK chains of trust for validating portable audio device authenticity.
- Collaborate with product firmware, DevOps, cloud engineering, manufacturing, and program management teams.
Requirements
- At least 6 years of industry experience in firmware development focused on security; an advanced degree may contribute toward experience.
- Experience developing for embedded systems and Linux platforms using C and C++.
- Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules.
- Experience building security applications and tools for firmware encryption and signing, secure asset provisioning, and developer enablement.
- Experience aligning embedded product security practices with EU CRA, NIST, ISO 27001, IEC 62443, or similar frameworks.
- Experience implementing embedded-system IP protection and anti-tamper mechanisms, including secure boot enforcement, firmware encryption, and hardware debug-port protection.
- Experience mitigating dependency and code-level defects involving memory management, input validation, timing attacks, broken authentication, and side channels.
- Experience with computer networking focused on security and IoT applications.
- Bachelor's degree in Computer Science or equivalent; a master's degree is beneficial.
Benefits
- Hiring range is $142,600-$196,000 for the primary work location in Framingham, Massachusetts; ranges may vary by location.
- Bonus programs, comprehensive health and welfare benefits, a 401(k) plan, exclusive wellbeing perks, and an employee discount are offered.
About Bose Corporation
Bose Corporation builds consumer speakers, soundbars, and noise‑cancelling headphones; professional and aviation headsets; and OEM automotive audio systems. It sells direct online and in retail, and supplies audio technology to carmakers through manufacturing partners. Founded in 1964 and privately held, Bose is headquartered in Framingham, Massachusetts, and operates globally across home, portable, automotive, and enterprise audio markets.