Stott and May
Principal Platform Security Architect - C, C++. Yocto, BMC, BIOS, Linux
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Principal Platform Security Architect
Skills
C, C++. Yocto, BMC, BIOS, Linux
Salary
£130,000 - £170,000 plus equity
Location
Cambridgeshire
We are looking for an experienced Platform Security Architect to oversee and improve security controls across platform firmware and embedded Linux environments.
This role combines hands-on engineering with high-level architecture across both embedded platforms (Yocto-based) and data center systems (BMC and platform firmware). You will design and secure low-level boot chains, firmware update mechanisms, and management plane subsystems while working alongside cross-functional engineering teams.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Evaluate and implement security mechanisms across BIOS, BMC, and device firmware.
- Secure boot flows, firmware signing, verification, rollback protection, and debug access.
- Harden embedded Linux environments through privilege management, service isolation, and attack surface reduction.
- Develop validation scripts/tools and integrate automated security testing into CI pipelines.
- Conduct threat modeling on low-level firmware and management plane architectures.
Requirements
- Hands-on experience customizing embedded Linux using Yocto / OpenEmbedded.
- Deep understanding of BIOS/UEFI, bootloaders, and secure boot trust chains.
- Experience with firmware update mechanisms, verification, and rollback protection.
- Familiarity with architecture and early boot processes.
- Proficiency in C/C++ for systems/embedded development.
- Automation experience (Python, Bash, CI workflow integration).
- Solid understanding of Linux security principles and platform interconnects (e.g., PCIe).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- OpenBMC or ecosystem experience.
- Security features: SELinux, AppArmor, or Linux capabilities.
- Hardware Roots of Trust (TPM, DICE).
- Firmware fuzzing or static/dynamic security analysis.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London