Product security engineer for hardware

Semidynamics; Barcelona; On-site; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Accelerated development path

Room to grow

Competitive package

Job summary

Semidynamics ищет инженера по безопасности аппаратного обеспечения для присоединения к команде безопасности и сертификации. Вы будете анализировать архитектуру безопасности наших RISC‑V ядер, RoT, прошивки и платформы SoC, чтобы обеспечить соответствие регуляторным требованиям.

Ваша работа включает документирование спецификаций безопасности, выявление слабых мест и разработку тестов, направленных на обход защиты, а также сотрудничество с командами разработки для устранения уязвимостей.

Qualifications

• Магистратура в области электротехники/электроники, компьютерной инженерии, кибербезопасности или близкой области.
• 2–5 лет опыта в аппаратной безопасности, архитектуре компьютеров или низкоуровневой системной безопасности.
• Понимание микроархитектуры RISC‑V, ISA и архитектуры платформ SoC.
• Опыт работы с C и ассемблером (желательно RISC‑V) для создания PoC-атак и тестов безопасности.
• Умение писать четкие спецификации безопасности, технические отчеты и выводы по уязвимостям.
• Способность работать самостоятельно и в команде.

Responsibilities

• Документировать спецификацию аппаратной безопасности платформы и поддерживать регуляторное соответствие.
• Анализировать архитектуру, спецификации и реализацию RISC‑V ядер, RoT, прошивки и платформы SoC.
• Следить за новыми уязвимостями в аппаратном уровне и развивать тесты на новые атаки.
• Сообщать о находках, предлагать меры по смягчению и работать с командами разработки для исправления уязвимостей.

Skills

RISC-V ISA

Hardware security

C programming

RISC‑V assembly

Technical writing

Vulnerability research

Team collaboration

Education

Master's degree in Electrical/Electronic Eng or related field

Tools

OpenTitan

Caliptra

Job description

Описание:

We are looking for a hardware-focused Product Security Engineer to join our Security and Certification team. Working closely with the hardware development team, you will analyze the security architecture of our RISC-V cores, hardware Root of Trust (RoT), firmware and SoC platform to support compliance with relevant security regulations and certifications, track the latest hardware attacks and turn that knowledge into concrete security tests and improvements for our designs.

Задачи:

Document our platform's hardware security specification and support regulatory and certification compliance efforts. Analyze the architecture, specifications, and implementation of our RISC‑V cores, RoT, firmware and SoC platform to identify security weaknesses. Stay current with RISC‑V security, hardware and platform attacks and emerging threats. Turn published attacks into security tests that validate our designs, and go beyond the state of the art by developing new attacks. Report findings, propose mitigations and work with the development teams to fix vulnerabilities and strengthen the platform's security.

Требования:

Master's degree in Electrical/Electronic Engineering, Computer Engineering, Computer Science, Cybersecurity or a related field. 2–5 years of industry or research experience in hardware security, computer architecture or low-level systems security. Solid understanding of RISC‑V processor microarchitecture, ISA and SoC platform architecture. Good knowledge of hardware attack vectors, including microarchitectural, physical and memory-based attacks, and of how they exploit weaknesses in processor and SoC designs. Experience with C and working knowledge of assembly, ideally RISC‑V, to write attack proofs‑of‑concept and security tests. Ability to write clear, well‑structured security specifications, technical reports and vulnerability findings. Ability to work both independently and collaboratively within a diverse, inclusive team.

Будет плюсом:

• Experience with open‑source hardware security projects such as Caliptra or OpenTitan
• Hands‑on experience with side‑channel analysis or fault‑injection tools and setups
• Experience reproducing published hardware attacks or taking part in CTFs and security research
• Experience with classical and Post‑Quantum Cryptography (PQC) and implementation‑level countermeasures
• Knowledge of confidential computing, trusted execution environments, remote attestation or memory isolation
• Awareness of hardware security standards and certification schemes (e.g., EU CRA, Common Criteria, FIPS 140‑3) and their vulnerability analysis methods
• Scripting skills (e.g., Python) for test automation and data analysis

Условия:

Work at one of Europe's most promising deep‑tech semiconductor scale‑ups Accelerated development path, with room to grow into confidential computing, memory isolation and software security 1 week of work from anywhere in the world Competitive package A collaborative, technical, growth‑oriented environment that values direct ownership and clear thinking