Lead Principal Security Engineer

What you'll do

• Define security requirements for compute hardware to ensure alignment with OCI's security posture.
• Provide independent design consulting for complex compute systems by balancing business objectives with security risks.
• Perform hands-on security and adversarial assessments of complex compute systems to identify potential vulnerabilities.
• Analyze complex systems, delegate components to team members, and synthesize findings into holistic assessments.
• Evaluate risk from threat models and implement appropriate mitigation controls across various teams.
• Communicate technical risks and mitigation options to senior leadership to balance security and business goals.
• Identify and drive improvements for security processes and hardware standards across the organization.
• Conduct research on industry trends to educate the company and mentor junior engineers.

What we're looking for

• Bachelor's degree in Electrical Engineering, Computer Science, or a related field.
• 10+ years of experience in hardware security architecture, engineering, validation, or planning.
• Demonstrated competency in hardware and firmware with a specific focus on security.
• Proficiency in computer architecture and the ability to review complex platform schematics for security concerns.
• Subject matter expertise in two or more areas including Root of Trust, x86/ARM platforms, GPU systems, BMCs, or SmartNICs.
• Knowledge of security concepts such as Attestation (SPDM), cryptography, Secureboot, and DICE.
• Ability to work with common programming languages including C, C++, Java, Python, Ruby, Go, and Rust.
• Experience with reverse engineering tools and extensive research into various classes of security bugs.