Senior Product Security Engineer - Audio Tech
Bose Corporation3 months ago
Framingham, MA, USASenior
Base Salary
$124k - $170k/yr
Responsibilities
- Architect and implement intellectual-property protections including anti-reverse engineering, secure firmware distribution, and debug interface lockdown.
- Design and implement ARM TrustZone secure applets, cryptographic IoT device identity, roots of trust, secrets management, key management, cryptography, and credential management.
- Integrate firmware encryption, digital signing, integrity verification, and secure update processes into embedded software.
- Implement firmware and proprietary algorithm binary obfuscation, anti-tamper controls, and other IP-protection mechanisms.
- Define security requirements, conduct product security assessments and testing, and advise engineering teams through architecture guidance, code reviews, design reviews, and solution development.
- Ensure alignment with applicable security regulations and standards, support audits and certifications, and act as a security stakeholder on interdisciplinary teams.
- Improve vulnerability discovery and patching processes and lead responses to external security threats.
- Design and maintain private X.509 and JWK chains of trust for validating portable audio device authenticity.
Requirements
- Bachelor’s degree in Computer Science or equivalent; a master’s degree is beneficial.
- At least 6 years of industry experience in firmware development focused on security; an advanced degree can contribute toward experience.
- Experience delivering licensed software on customer products and systems where the execution environment is not trusted.
- Hands-on experience with secure boot, firmware encryption, digital signing, secure firmware distribution, anti-tamper controls, binary obfuscation, anti-reverse engineering, and hardware debug-port protection.
- Embedded-systems and Linux development experience in C/C++.
- Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules.
- Experience collaborating with cross-functional engineering teams to integrate security controls throughout the embedded product development lifecycle.
- Preferred experience with EU CRA, NIST, ISO 27001, IEC 62443, mobile applications on iOS or Android, cryptographic security applications, secure asset provisioning, and mitigation of memory-management, input-validation, timing, authentication, and side-channel defects.
Benefits
- Competitive salary, bonus programs, comprehensive health and welfare benefits, a 401(k) plan, pension, exclusive wellbeing perks, and an employee discount.
- The hiring range for the primary Framingham, Massachusetts work location is $123,500-$169,850, with ranges varying by location.
- The company offers a culture focused on security, stability, quality, respect, opportunity, and innovation.
About Bose Corporation
Bose Corporation builds consumer speakers, soundbars, and noise‑cancelling headphones; professional and aviation headsets; and OEM automotive audio systems. It sells direct online and in retail, and supplies audio technology to carmakers through manufacturing partners. Founded in 1964 and privately held, Bose is headquartered in Framingham, Massachusetts, and operates globally across home, portable, automotive, and enterprise audio markets.