Hardware Security

Hardware Security Cybersecurity Jobs

2 jobs found

Today

Principal Security Engineer

Oracle Nashville, TN

Nashville, TN

Today

Full time Embedded Systems Embedded Systems Security Engineer

Apply Now

Job Description

Build stronger security foundations for cloud compute. As a Principal Hardware Security Engineer on Oracle Cloud Infrastructure, you will define and implement hardware security requirements that help ensure OCI compute hardware aligns with security posture and compliance needs. You will collaborate with Oracle teams, third-party vendors, and standards organizations to shape next-generation hardware platform security and strengthen operational security through both supply chain and operational requirements.

Onsite role in Nashville, TN with an emphasis on independent technical leadership, security validation, and cross-team execution.

Responsibilities

Define hardware security requirements that align OCI security posture with business needs and evolving technology trends
Provide independent design consulting to implement hardware security requirements within your area of expertise
Provide independent design consulting to implement features needed to achieve the security bar
Advise on security-aligned operations for provisioning, re-use, and decommissioning
Perform security assessments of compute devices to verify requirements are met
Conduct adversarial assessments to help ensure devices cannot be compromised
Assess risk from findings and threat models, and identify appropriate risk mitigation controls
Coordinate across teams to ensure requirements, findings, and recommendations are implemented
Mentor junior engineers

Requirements

Bachelor’s degree in Electrical Engineering, Computer Science, or a related field (or equivalent experience)
8-10+ years of experience in hardware security architecture, engineering, validation, planning, or a related area
Demonstrated competency in hardware and firmware with a focus on security
Competency with computer architecture
Subject matter expertise in at least one area: Root Of Trust (TCG SRTM, DRTM), x86 (Intel, AMD), ARM server platform architecture, UEFI, GPU platforms, rackscale systems, clustering, Baseboard Management Controllers, SmartNICs (DPUs), or Storage devices
Security concepts and standards related to Attestation (for example SPDM) and measurements, cryptography, Secureboot, and DICE
Ability to work with common programming languages: C, C++, Java, Python, Ruby, Go, Rust
Ability to read and review hardware schematics for security concerns
Experience using reversing tools and ability to reverse engineer

Technologies

TCG SRTM, TCG DRTM
UEFI, SPDM, Secureboot, DICE
C, C++, Java, Python, Ruby, Go, Rust
Intel SGX
SPI, I2C, RS232-style serial

Preferred Qualifications

Ability to read and understand x86 and/or ARM assembly language
Knowledge of vendor-specific TEE technologies such as Intel SGX
Familiarity with embedded communications interfaces including SPI, I2C, and RS232-style serial
Basic knowledge of enterprise and/or datacenter networking architecture
Experience operating in a large-scale DevOps or CI/CD environment
Ability to write clear and concise product security requirements
Ability to assess risk from findings and threat models and identify risk mitigation controls
Ability to succeed both independently and collaboratively with internal and external partners
Experience working effectively in a large and distributed company
Excellent organizational, verbal, and written communication skills

View full job page →

Today

Lead Principal Security Engineer

Oracle Nashville, TN

Nashville, TN

Today

Full time Cloud Platforms Engineer Hardware Attestation

Apply Now

Job Description

Lead Principal Security Engineer for Oracle OCI, focusing on consulting for hardware security to ensure compute platforms meet security requirements and strengthen operational security posture.

Responsibilities

Define hardware security requirements that align business needs and technology trends to support OCI security posture
Provide independent design consulting for complex compute systems to balance business objectives with security risks and implement requirements from the hardware security team
Advise on implementing features required to meet the security bar for complex compute systems
Consult on secure operations for compute systems, including provisioning, re-use, and decommissioning aligned with the security posture
Perform security assessments of complex compute systems to verify requirements are met
Conduct adversarial assessments to confirm systems cannot be compromised
Break down complex systems for analysis, assign parts to other team members, and collaborate to synthesize inputs into a holistic assessment contextualized to cloud environments
Review business objectives and requirements, assess risk from findings and threat models, and identify appropriate risk mitigation controls
Partner across teams to ensure requirements, findings, and recommendations are implemented inline with expected outcomes
Communicate risks and mitigation options to senior leadership while balancing security, technology, and business goals
Identify opportunities for security and process improvements and drive adoption across the organization
Contribute individual research to advance state-of-industry security knowledge
Track security subject-matter developments and educate both the business and security organizations
Mentor junior engineers

Requirements

Bachelor’s degree in Electrical Engineering, Computer Science, or related field (or equivalent experience)
10+ years of experience in hardware security architecture, engineering, validation, planning, or related work
Demonstrated competency in hardware/firmware security
Competency with computer architecture
Subject matter expertise in two or more areas:
- Root Of Trust (TCG SRTM, DRTM)
- x86 (Intel, AMD)
- ARM server platform architecture
- UEFI
- GPU platforms, rackscale systems, clustering
- Baseboard Management Controllers
- SmartNICs (DPUs)
- Storage devices
Security concepts and standards related to Attestation (example: SPDM), cryptography, Secureboot, DICE, etc.
Ability to work with common programming languages: C, C++, Java, Python, Ruby, Go, Rust
Ability to read and review complex hardware system and platform-level schematics for security concerns
Experience using reversing tools and ability to reverse engineer
Extensive research or experience with multiple classes of security bugs
Experience specifying and/or designing hardware security features

Technologies

TCG SRTM, TCG DRTM
x86, Intel, AMD
ARM server platform architecture, UEFI
GPU platforms, rackscale systems, clustering
Baseboard Management Controllers
SmartNICs (DPUs)
Storage devices
Attestation, SPDM
cryptography, Secureboot, DICE
C, C++, Java, Python, Ruby, Go, Rust
Intel SGX
SPI, I2C, RS232-style serial

Preferred Qualifications

Ability to read and understand x86 and/or ARM assembly language
Knowledge of vendor-specific TEE technologies such as Intel SGX
Familiarity with embedded communications interfaces: SPI, I2C, RS232-style serial
Knowledge of host and network virtualization technologies and how to use them securely
Knowledge of enterprise and/or datacenter networking architecture
Experience operating in a large-scale DevOps or CI/CD environment
Ability to write clear and concise product security requirements
Ability to assess risk from findings and threat models and identify proper risk mitigation controls
Ability to succeed individually or collaboratively, internally or with external organizations and individuals
Significant experience working effectively in a large and distributed company
Excellent organizational, verbal, and written communication skills
Experience conducting training, thought leadership, conference talks, and publications

View full job page →

Hardware Security Cybersecurity Jobs

Principal Security Engineer

Lead Principal Security Engineer

Get Hardware Security Cybersecurity Jobs alerts