Principal Product Security Architect

Arm; Valbonne; Hybride; EUR 102 000 - 138 000; Plein temps

Résumé du poste

Arm is seeking a Principal Product Security Engineer to lead interactions with external security laboratories and certification bodies. You will steer security evaluations, coordinate certification programs, and ensure products meet industry standards and regulatory requirements.

This role guarantees that Arm products achieve and maintain high assurance levels through rigorous evaluation processes and comprehensive documentation.

Qualifications

• 10+ years of experience in product security, security evaluation, certification, or a related field.
• Strong understanding of security evaluation schemes such as Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA or similar frameworks.
• Confirmed experience collaborating with external security laboratories and navigating formal evaluation processes.
• Confirmed understanding of cryptographic primitives, secure key lifecycle management, and secure provisioning workflows.
• Experience with silicon/SoC security architecture, including threat modelling, attacker models, and countermeasures.
• Good organizational skills with the ability to handle sophisticated, multi-stakeholder projects.
• Excellent communication, negotiation, and documentation abilities.
• Ability to work with multi-functional engineering, product, and security teams.

Responsabilités

• Act as the primary technical work with accredited third-party security laboratories responsible for evaluating Arm products.
• Lead, coordinate, and run end-to-end security evaluation and certification programs, including planning, execution, documentation, and closure.
• Ensure that all evidence, documentation, test vectors, and artefacts required for certification are accurate, complete, and delivered on schedule.
• Review and validate lab findings, ensuring corrective actions are implemented and retested when needed.
• Maintain up-to-date knowledge of evolving certification standards (e.g., Common Criteria, PSA Certified, SESIP, FIPS, ISO21434, IEC 62443, etc.).
• Establish and maintain clear, comprehensive, and current documentation for all evaluation processes and certification workflows.
• Provide internal guidance and mentoring on evaluation methodologies, certification readiness, and standards.

Connaissances

Product security

Security evaluation

Certification programs

Cryptography basics

SoC security

Documentation

Stakeholder management

Communication

Description du poste

Job ID 2026-16804 Date posted 18/06/2026 Location Sophia Antipolis, France Category Product Security

Overview

Arm is seeking an expert Principal Product Security Engineer to lead and run interactions with external security laboratories and certification bodies. As a senior member of the Product Security team, you will lead different aspects of security evaluations, coordinate certification activities, and ensure that our products meet industry standard methodologies and regulatory requirements.

This role is relevant in guaranteeing that Arm products achieve and maintain the vital assurance levels through detailed, evaluation processes.

Responsibilities

• Act as the primary technical work with accredited third-party security laboratories responsible for evaluating Arm products
• Lead, coordinate, and run end-to-end security evaluation and certification programs, including planning, execution, documentation, and closure
• Ensure that all evidence, documentation, test vectors, and artefacts required for certification are accurate, complete, and delivered on schedule
• Review and validate lab findings, ensuring corrective actions are implemented and retested when needed
• Maintain up-to-date knowledge of evolving certification standards (e.g., Common Criteria, PSA Certified, SESIP, FIPS, OCP safe, ISO21434, IEC 62443, etc.)
• Establish and maintain clear, comprehensive, and current documentation for all evaluation processes and certification workflows
• Provide internal guidance and mentoring on evaluation methodologies, certification readiness, and standards

Required Skills & Experience

• 10+ years of experience in product security, security evaluation, certification, or a related field
• Strong understanding of security evaluation schemes such as Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA or similar frameworks
• Confirmed experience collaborating with external security laboratories and navigating formal evaluation processes
• Confirmed understanding of cryptographic primitives, secure key lifecycle management, and secure provisioning workflows
• Experience with silicon/SoC security architecture, including threat modelling, attacker models, and countermeasures
• Good organizational skills with the ability to handle sophisticated, multi-stakeholder projects
• Excellent communication, negotiation, and documentation abilities
• Ability to work with multi-functional engineering, product, and security teams

Nice-to-Have Skills

• Experience with secure hardware components such as cryptography accelerators, RoT modules, Secure enclaves, HSMs, or TEE/TF-M environments
• Experience with secure firmware components such as secure Boot Rom, Bootloader, TFM/TFA, OP-TEE, hyper/micro-visor etc.
• Practical knowledge of semiconductor manufacturing flows and supply chain security
• Familiarity with side-channel analysis, fault-injection testing, and hardware penetration testing methodologies

Additional Information

Please note that a relocation package (including visa sponsorship support) is available for this role, for candidates who require it.

Accommodations at Arm

At Arm, we want our people to Do Great Things. If you need support or an accommodation to Be Your Brilliant Self during the recruitment process, please email

Hybrid Working at Arm

Arm’s approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.

Equal Opportunities at Arm

Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Salary Range

€101,700 - €137,700 per year