Experience Senior · 6+ yrs (5+ years)
About the role
structured by ORIDefine security requirements for OCI cloud compute hardware. Provide design consulting, Architectural and Adversarial Assessment for compute hardware.
What you will do
- Definition of security requirements for hardware enabling OCI security posture aligning business needs and technology trends
- Provide independent design consulting for complex compute systems, balancing business objective and security risks
- Hands on security assessments and adversarial assessments of complex compute systems to ensure they meet requirements and can't be compromised
- Breakdown complex systems for analysis, assign parts to team members, and collaborate to form holistic assessments contextualized to cloud environments
- Communicate risks and options to mitigate to senior leadership, balancing security, technology and business goals
What they are looking for
- Bachelor's degree in Electrical Engineering, Computer Science or related field or equivalent experience
- 10+ years of experience in hardware security architecture / engineering / validation / planning or related area
- Demonstrated competency in hardware/firmware with a focus on security
- Competency with computer architecture
- Subject Matter Expertise in two or more of the specified areas (Root Of Trust, x86/ARM server platform architecture, GPU platforms/rackscale systems, Baseboard Management Controllers, SmartNICs, Storage devices, Security concepts and standards associated Attestation, etc.)
- Ability to work with most common programming languages (C, C++, Java, Python, Ruby, Go, Rust)
- Ability to read and review complex hardware system/platform level schematics for security concerns
- Experience with reversing tools and ability to reverse engineer
- Extensive research or experience with multiple classes of security bugs
- Specification and/or design of hardware security features
Nice to have
- Ability to read and understand x86 and/or ARM assembly language
- Knowledge of vendor-specific TEE technologies such as Intel SGX
- Familiarity with common embedded communications interfaces (SPI, I2C, RS232-style serial)
- Knowledge of host and network virtualization technologies and how to use them securely
- Knowledge of enterprise and/or datacenter networking architecture
- Experience operating in a large-scale DevOps or CICD environment
- Ability to write clear and concise product security requirements
- Ability to effectively assess risk from findings and threat models and identify proper risk mitigation controls
Benefits
- Medical, dental, and vision insurance, including expert medical opinion
- Short term disability and long term disability
- Life insurance and AD&D
- 401(k) Savings and Investment Plan with company match
- Paid time off: Flexible Vacation (salaried) or Accrued Vacation
Hardware SecurityFirmware SecurityComputer ArchitectureCryptographyReverse EngineeringThreat ModelingAttestationSecure BootCC++JavaPythonRubyGoRustUEFI
Full posting text
Define security requirements for OCI cloud compute hardware. Provide design consulting, Architectural and Adversarial Assessment for compute hardware. Define Operating procedures for secure lifecycle management