1 day ago
Cambridge, United KingdomStaff+
Responsibilities
- Triage, assess, and resolve product security vulnerabilities across Arm hardware and software.
- Lead and coordinate product security incident response across engineering teams, business functions, customers, and industry partners.
- Own coordinated vulnerability disclosure, including disclosure strategy, timelines, customer communications, CVE assignment, and security advisory publication.
- Represent Arm in security engagements with researchers, customers, partners, and the broader security community.
- Support and improve Arm’s bug bounty programs, PSIRT processes, tooling, metrics, and incident response practices.
- Protect the integrity and confidentiality of vulnerability handling while ensuring accurate, timely, and industry-aligned responses.
Requirements
- Previous experience in a PSIRT, vulnerability disclosure, or bug bounty triage role.
- Working knowledge of CVE processes, vulnerability advisories, severity assessment, and remediation coordination.
- Clear communication skills for working with technical and non-technical collaborators across teams and priorities.
- Desirable: experience handling hardware and/or software vulnerabilities.
- Desirable: experience supporting a bug bounty program.
- Desirable: familiarity with vulnerability severity scoring such as CVSS.
- Desirable: understanding of secure development practices, product security risk management, or security architecture.
- Desirable: experience engaging with external researchers, customers, CERTs, CVE/CNA programs, or industry security communities.
Benefits
- Hybrid working arrangements are determined by each team, with details shared during the application process.
- Arm provides recruitment adjustments and accommodations for applicants who need them.
- Arm is an equal opportunity employer committed to a respectful and inclusive workplace.
Categories
About Arm
Arm’s foundational technology is defining the future of computing. A future built by the greatest technology ecosystem in the world. A future built on Arm. Arm is everywhere technology matters. Technology matters everywhere. Together, we’ll power every technology revolution moving forward, including cloud computing, automotive and autonomous systems, IoT, the metaverse, and beyond. Changing the world. Again. On Arm.