Product Security Engineer (Hardware)

Hireroo Ltd; Barcelona; Hybrid; EUR 60,000 - 80,000; Full time

Benefits offered by this job

Flexible hours

Hybrid model

Relocation support

Housing search assistance

Visa support

Language classes

Virtual shares

Job summary

Hireroo Ltd is seeking a Product Security Engineer, Hardware to strengthen processor and SoC security through architecture analysis, attack research and practical testing.

The role requires 2–5 years in hardware security, a Master’s in a relevant field, and strong RISC-V and C/assembly skills. Hybrid Barcelona location with collaboration across hardware teams and regulatory readiness responsibilities.

Qualifications

• 2 to 5 years hardware security or systems security experience.
• Master's degree in a relevant technical field.
• Strong understanding of RISC-V architecture and processor microarchitecture.
• Proficient in C programming and assembly (RISC-V).
• Ability to create security tests and proofs of concept.

Responsibilities

• Analyse processor, SoC, Root of Trust and firmware security.
• Review hardware architecture for vulnerabilities.
• Maintain hardware security specifications and documentation.
• Research new hardware attack techniques and build attack scenarios.
• Develop security tests and PoCs; reproduce attacks on real implementations.
• Report vulnerabilities with clear mitigations and work with teams to resolve findings.
• Support security certification and regulatory activities; automate tests where relevant.

Skills

C programming

Assembly knowledge (RISC-V)

Security testing

Technical documentation

Independent work

Education

Master's degree in a relevant technical field

Tools

Python

RISC-V

Job description

Job Description

Our partner is looking for a Product Security Engineer, Hardware to strengthen the security of processor and SoC platforms through architecture analysis, attack research and practical security testing.

The role focuses on identifying weaknesses in processor hardware, Root of Trust, firmware and SoC designs, then turning known and emerging attack techniques into concrete tests and mitigation recommendations. You will work closely with hardware teams and contribute to security documentation, regulatory readiness and product security improvements.

Location: Barcelona, Spain, Hybrid
Level: Mid

Responsibilities

• Analyse processor, SoC, Root of Trust and firmware security

• Review hardware architecture and implementation for vulnerabilities

• Maintain hardware security specifications and technical documentation

• Research new hardware and platform attack techniques

• Reproduce published attacks against real implementations

• Develop new security tests and attack scenarios

• Identify microarchitectural, physical and memory related weaknesses

• Build proof of concept attacks using C and assembly

• Report vulnerabilities clearly and recommend mitigations

• Work with hardware teams to validate and resolve findings

• Support security certification and regulatory compliance activities

• Automate security testing and data analysis where relevant

Requirements

• 2 to 5 years of hardware security, computer architecture or systems security experience

• Master's degree in a relevant technical field

• Strong understanding of RISC V architecture

• Processor microarchitecture and SoC knowledge

• Knowledge of hardware attack techniques

• Microarchitectural attack knowledge

• Physical and memory attack awareness

• C programming experience

• Assembly knowledge, ideally RISC V

• Ability to create security tests and attack proofs of concept

• Strong technical documentation skills

• Ability to work independently and with engineering teams

Optional / Desired

• Caliptra or OpenTitan

• Side channel analysis

• Fault injection

• Hardware security research or CTF experience

• Classical cryptography

• Post Quantum Cryptography

• Confidential computing

• Trusted execution environments

• Remote attestation

• Memory isolation

• EU CRA

• Common Criteria

• FIPS 140-3

• Python for test automation and analysis

What's in it for you?

• Flexible working hours

• Hybrid model, 4 days office, 1 day from home

• 1 week per year working from anywhere

• 25 days annual leave plus December 24 and 31

• Monthly food allowance

• Private medical insurance

• Relocation bonus

• Housing search support

• Visa support if required

• Family relocation support

• Virtual shares

• Language classes

• Tax incentive, subject to eligibility