Senior Offensive Security Engineer – Data Center Systems

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Identify vulnerabilities and develop exploits for Data Center Systems firmware, which includes management controllers, roots of trust, BIOS, GPUs, SmartNICs, and NVLink switches.

• Operate from platform threat models that encompass tenant attacks on the management plane, operator attacks on confidential workloads, and supply-chain tampering.

• Drive security improvements, address issue classes, and strengthen defense in depth.

• Automate the processes of bug discovery, severity evaluation, and mapping to platform-level threats.

⛳️ Requirements

• Bachelor’s or Master’s degree in Computer Engineering, Computer Science, or a related discipline, or equivalent professional experience.

• Over 5 years of experience in security engineering or vulnerability research, with at least 4 years in software engineering.

• Outstanding skills in C and Python programming.

• Proficient in reading ARM or RISC-V assembly language.

• Background in auditing embedded firmware, Linux applications, and network-facing services.

• Familiarity with modern fuzzing tools such as AFL++, libFuzzer, or syzkaller.

• Experience in static analysis.

• Understanding of contemporary server architecture and secure boot processes.

• Strong written and verbal communication skills when collaborating with engineering teams and leadership.

• Ability to collaborate effectively with remote teams.

🏝️ Benefits

• Equity.

• Benefits.