Software Engineer, Platform Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Define and enhance the security architecture across the complete compute stack, encompassing FPGA, BIOS/UEFI, and BMC hardware interfaces, as well as FreeBSD and Linux operating systems.

• Implement security improvements via kernel and user-space development, configurations, TPMs, and hardware security features.

• Lead platform integrity efforts including secure/controlled boot processes and enhanced BMC access controls and auditability.

• Analyze and address system-level security vulnerabilities, including issues related to hardware/GPU and OS isolation.

• Provide expertise in appliance security during incident response activities.

• Collaborate with stakeholders to establish secure architectures for binary ingestion and execution.

• Create automated systems and low-level tools for vulnerability research aimed at minimizing manual security efforts in build, test, and release processes.

• Serve as a security liaison between Open Connect and various entities, including organizations, silicon/firmware vendors, OS communities, and disclosure partners.

• Acquire knowledge and adapt to new architectures and features.

⛳️ Requirements

• Demonstrated experience in architecting and implementing security features that significantly enhance system security.

• Extensive knowledge of low-level systems and hardware security, particularly in kernels, firmware, BMC, BIOS/UEFI, and FPGA.

• Proficient in using containers or virtual machines to boost security.

• Successful in cross-functional collaborations to enhance security posture.

• Experience with AI agents to streamline security research.

• Capability to define and independently manage cross-functional projects guided by ambiguous queries.

• Skill in translating business and product objectives into security requirements, technical designs, and implementations.

• Self-motivated with a curious nature and a readiness to ask questions.

• Quick learner enthusiastic about emerging technologies.

• Collaborative mindset with a sense of ownership from project inception to production.

• Preferred: background in security research with published work.

• Preferred: experience in penetration testing with a focus on identifying significant improvement areas and security vulnerabilities.

• Preferred: experience in kernel development.

• Preferred: familiarity with TPMs/HSMs, trusted execution environments, and other hardware features.

• Preferred: experience in measured/secure boot processes and hardware roots of trust.

• Preferred: knowledge in highly distributed systems and fuzz testing.

• Preferred: security experience with FreeBSD and Linux, particularly in relation to GPU/virtualization isolation.

• Preferred: proficiency in C, Golang, and Python.

🏝️ Benefits

• Annual compensation may be divided between salary and stock options.

• Health Plans.

• Mental Health support.

• 401(k) Retirement Plan with employer matching.

• Stock Option Program.

• Disability Programs.

• Health Savings and Flexible Spending Accounts.

• Family-forming benefits.

• Life and Serious Injury Benefits.

• Paid leave of absence programs.

• Full-time hourly employees earn 35 days annually for paid time off, applicable for vacations, holidays, and sick leave.

• Full-time salaried employees are granted immediate access to flexible time off.

• Disability accommodation/adjustment assistance during the hiring process.