Principal Security Engineer

What you'll do

• Define security requirements for compute hardware to ensure alignment with OCI's security posture.
• Provide independent design consulting to implement required features and secure operational procedures.
• Perform hands-on security assessments of compute devices to verify they meet established requirements.
• Conduct adversarial assessments of compute devices to ensure they cannot be compromised.
• Assess risks from findings and threat models to identify and implement appropriate mitigation controls.
• Collaborate with internal teams and external vendors to ensure security recommendations are implemented.
• Mentor junior engineers in hardware and firmware security practices.

What we're looking for

• Bachelor's degree in Electrical Engineering, Computer Science, or a related field (or equivalent experience).
• 8 to 10+ years of experience in hardware security architecture, engineering, validation, planning, or a related area.
• Demonstrated competency in hardware and firmware with a focus on security.
• Competency with computer architecture and ability to read/review hardware schematics for security concerns.
• Subject matter expertise in areas such as Root of Trust, x86/ARM server platforms, GPU systems, BMCs, SmartNICs, or storage devices.
• Knowledge of security concepts including Attestation (e.g., SPDM), cryptography, Secureboot, and DICE.
• Ability to work with common programming languages including C, C++, Java, Python, Ruby, Go, and Rust.
• Experience with reverse engineering tools and the ability to perform reverse engineering.
• Ability to read and understand x86 and/or ARM assembly language (preferred).
• Knowledge of vendor-specific TEE technologies such as Intel SGX (preferred).
• Familiarity with common embedded communications interfaces like SPI, I2C, and RS232 (preferred).
• Experience operating in a large-scale DevOps or CI/CD environment (preferred).