Senior Offensive Security Engineer - Hybrid, CPU Security

OPENCHIP & SOFTWARE TECHNOLOGIES; Barcelona; Hybride; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

Résumé du poste

Openchip & Software Technologies S.L. is seeking a Senior Offensive Security Engineer to secure our RISC-V chip and software stack in a Barcelona-based role.

You will perform security assessments, code reviews, and vulnerability testing to highlight risks and guide Openchip teams and partners. You will lead threat modeling, develop security guidance, and ensure alignment with standards like FIPS, NIST, and ISO 27001 while collaborating across hardware and software teams.

Qualifications

• Bachelor or Master’s degree in a relevant field.
• 5–10 years of experience in security roles.
• Experience with Git, CI and Jira.
• Solid knowledge of computer architecture and security domains.
• Knowledge in microarchitectural security, platform security, cryptography and boot integrity.

Responsabilités

• Identify vulnerabilities across the software and firmware stack.
• Develop threat models for the Openchip SW Stack.
• Create and maintain security guidance, best practices and mitigation strategies.
• Drive alignment with industry security standards (FIPS, NIST, ISO 27001).
• Conduct deep security research in areas like microarchitectural security and cryptography.
• Collaborate across projects to unblock issues and reach consensus.

Connaissances

Security assessments

Threat modeling

Vulnerability testing

Code reviews

Git

Jira

Linux

Formation

Bachelor or Master’s degree in a relevant field

Outils

Git

Jira

OpenSSL

Linux

CI/CD

Description du poste

Openchip & Software Technologies S.L. is seeking a Senior Offensive Security Engineer to secure our RISC-V chip and software stack in a Barcelona-based role.

You will perform security assessments, code reviews, and vulnerability testing to highlight risks and guide Openchip teams and partners. You will lead threat modeling, develop security guidance, and ensure alignment with standards like FIPS, NIST, and ISO 27001 while collaborating across hardware and software teams.