Senior Product Security Engineer - Audio Tech
Bose Corporation1 month ago
Framingham, MA, USASenior
Base Salary
$124k - $170k/yr
Responsibilities
- Architect and implement intellectual-property protections including anti-reverse engineering, secure firmware distribution, and debug interface lockdown.
- Design and implement ARM TrustZone secure applets, cryptographic IoT device identity, roots of trust, secrets management, key management, cryptography, and credential management.
- Integrate firmware encryption, digital signing, integrity verification, and secure update processes into embedded software.
- Implement firmware and proprietary algorithm binary obfuscation, anti-tamper controls, and other IP-protection mechanisms.
- Define security requirements, conduct product security assessments and testing, and advise engineering teams through architecture guidance, code reviews, design reviews, and solution development.
- Ensure alignment with applicable security regulations and standards, support audits and certifications, and act as a security stakeholder on interdisciplinary teams.
- Improve vulnerability discovery and patching processes and lead responses to external security threats.
- Design and maintain private X.509 and JWK chains of trust for validating portable audio device authenticity.
Requirements
- Bachelor’s degree in Computer Science or equivalent; a master’s degree is beneficial.
- At least 6 years of industry experience in firmware development focused on security; an advanced degree can contribute toward experience.
- Experience delivering licensed software on customer products and systems where the execution environment is not trusted.
- Hands-on experience with secure boot, firmware encryption, digital signing, secure firmware distribution, anti-tamper controls, binary obfuscation, anti-reverse engineering, and hardware debug-port protection.
- Embedded-systems and Linux development experience in C/C++.
- Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules.
- Experience collaborating with cross-functional engineering teams to integrate security controls throughout the embedded product development lifecycle.
- Preferred experience with EU CRA, NIST, ISO 27001, IEC 62443, mobile applications on iOS or Android, cryptographic security applications, secure asset provisioning, and mitigation of memory-management, input-validation, timing, authentication, and side-channel defects.
Benefits
- Competitive salary, bonus programs, comprehensive health and welfare benefits, a 401(k) plan, pension, exclusive wellbeing perks, and an employee discount.
- The hiring range for the primary Framingham, Massachusetts work location is $123,500-$169,850, with ranges varying by location.
- The company offers a culture focused on security, stability, quality, respect, opportunity, and innovation.