Principal Security Engineer

What you'll do

• Define security requirements for hardware to ensure alignment with OCI's security posture and business needs.
• Provide independent design consulting to implement required features for provisioning, reuse, and decommissioning of devices.
• Conduct hands-on security assessments of compute devices to ensure they meet established security standards.
• Perform adversarial assessments on compute devices to identify potential vulnerabilities and compromise points.
• Analyze risks from findings and threat models to develop and implement appropriate mitigation controls.
• Collaborate with internal teams and third-party vendors to ensure security recommendations are implemented.
• Mentor junior engineers in hardware security practices and technical skills.

What we're looking for

• Bachelor's degree in Electrical Engineering, Computer Science, or a related field (or equivalent experience).
• 8-10+ years of experience in hardware security architecture, engineering, validation, planning, or a related area.
• Demonstrated competency in hardware and firmware with a focus on security.
• Competency with computer architecture.
• Subject matter expertise in one area: Root of Trust, x86/ARM platforms, GPU systems, BMCs, SmartNICs, or storage devices.
• Knowledge of security concepts including Attestation (SPDM), cryptography, Secureboot, and DICE.
• Ability to work with common programming languages such as C, C++, Java, Python, Ruby, Go, or Rust.
• Ability to read hardware schematics for security concerns and use tools to reverse engineer components.
• Ability to read and understand x86 and/or ARM assembly language (preferred).
• Knowledge of vendor-specific TEE technologies such as Intel SGX (preferred).
• Familiarity with common embedded communications interfaces like SPI, I2C, and RS232 (preferred).
• Experience operating in a large-scale DevOps or CI/CD environment (preferred).