Offensive Hardware Security Engineer, Platform Security

Overview

Offensive Hardware Security Engineer focused on platform security, performing vulnerability assessments across secure boot chains, attestation, and runtime integrity for a variety of hardware platforms.

What you'll do

• Audit secure boot chains from firmware through OS initialization across diverse hardware platforms.
• Assess attestation systems that provide cryptographic proof of system state from hardware root of trust to the application layer.
• Review measured boot implementations and runtime integrity monitoring.
• Validate security mechanisms before production deployment and ensure issues are fully eliminated and not reintroduced.
• Conduct firmware vulnerability assessments and penetration testing.
• Build firmware vulnerability assessment pipelines for continuous security monitoring.
• Collaborate with software and hardware vendors to meet exploit mitigation requirements.

What you'll need

• Proven track record of hands-on vulnerability auditing on complex, security-critical systems.
• Hands-on experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone).
• Strong understanding of cryptographic protocols and hardware security modules.
• Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust implementation.
• Proficiency in low-level programming languages (C, Assembly) and systems programming.
• Knowledge of firmware vulnerability assessment and threat modeling.
• Ability to work effectively across hardware and software boundaries.

Details

• Annual salary range: $320,000 to $405,000 USD.
• Logistics: minimum education Bachelor’s degree or equivalent; required field relevant to the role.
• Location-based hybrid policy: staff expected to be in one of the company offices at least 25% of the time.
• Visa sponsorship: sponsored, with limitations by role/candidate; reasonable efforts with immigration lawyer support.