Arm
Principal Product Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Overview
We are looking for an expert in security assessment of firmware, drivers, and operating systems to join Arm's Product Security team. In this role, you will lead Arm's approach to offensive software security with specific focus on fuzzing and penetration testing.
Responsibilities
- Develop software security test framework and processes across Arm's firmware, drivers and system software
- Lead Arm's internal penetration test strategy for software products
- Schedule, prioritise and conduct software security tests
- Lead other security test engineers within the product security team and across the business
Required Skills and Experience
- Deep knowledge and expertise in design, development, documentation and testing of software specifically for low level software such as firmware and drivers
- Strong understandings of SoC security fundamentals such as secure boot, measured boot, attestation, signing, Root of Trust
- Proven knowledge in leading software security assessment and penetration testing preferably at SoC level
- Demonstrated skills for finding security vulnerabilities "which matter"
- Professional knowledge of software languages (such as C/C++, Rust, Python)
- Strong background in offensive security research
- Knowledge of Arm assembly, Arm based SoCs and devices
- Experience in leading fuzz testing activities and with tooling
- Capable of providing technical leadership
- Good interpersonal and communication skills
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
“Nice To Have” Skills and Experience
- Experience in performing security assessment on products towards external security certification such as common criteria, PSA, SESIP, FIPS
- Have participated in CTFs, Hackathons, or similar events
- Have published work within the offensive security domain at leading venues
- Experience with security evaluation of Linux kernel security, Android OS security, Windows systems and drivers security
- Experience in security of GPU/CPU/System firmware and drivers
- Professional certifications such as OSCP/OSEE
Get help with your application
Your very own career expert that helps elevate your application to the next level.
In Return
With offices worldwide, Arm is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to Arm's success in the global marketplace.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills