1 month ago
Cambridge, United KingdomSenior
Responsibilities
- Review firmware and SoC architectures for security risks and threat models.
- Evaluate secure boot, rollback protection, memory isolation, and trusted execution environments.
- Perform C/C++ security code reviews to identify implementation-level flaws.
- Conduct targeted hands-on tests to validate security concerns and security assumptions.
- Collaborate with cross-functional teams to embed security into the development lifecycle.
- Shape secure firmware architectures for key handling, update flows, and hardware-backed protections.
- Communicate security risks and solutions to technical and non-technical audiences.
Requirements
- Proven experience securing hardware-firmware interfaces or embedded systems.
- Strong hands-on expertise in C/C++ security code reviews.
- Experience with secure boot, key provisioning, firmware hardening, and trusted computing.
- Understanding of firmware attack surfaces including fault injection, code injection, and privilege escalation.
- Familiarity with Arm TrustZone, secure monitors, or memory protection technologies.
- Experience running and interpreting quick security tests.
- Experience with side-channel or fault attacks.
- Strong collaboration, communication, and documentation skills.
- Preferred experience with RTL and UVM/SystemVerilog hardware design flows, TPMs, Secure Elements, hardware-backed cryptographic modules, embedded security research, vulnerability discovery, public CVEs, or certification schemes such as SESIP, PSA Certified, and Common Criteria.
Benefits
- Hybrid working with team-determined patterns between office and other locations, subject to local legal, regulatory, tax, and other considerations.
- Recruitment accommodations are available for applicants who need support.
About Arm
Arm’s foundational technology is defining the future of computing. A future built by the greatest technology ecosystem in the world. A future built on Arm. Arm is everywhere technology matters. Technology matters everywhere. Together, we’ll power every technology revolution moving forward, including cloud computing, automotive and autonomous systems, IoT, the metaverse, and beyond. Changing the world. Again. On Arm.