Lead SoC Security Engineer - Offensive Testing & Fuzzing

United States Digital Space LLC; Cambridge; On-site; GBP 120,000 - 160,000; Full time

Job summary

United States Digital Space LLC in Cambridge is seeking an expert in security assessment of firmware, drivers and operating systems to join the Product Security team. You will lead the company\'s approach to offensive software security with a focus on fuzzing and penetration testing.

You will develop a security test framework across firmware, drivers and system software, lead internal penetration tests, and mentor other security test engineers within the product security team.

Qualifications

• Deep knowledge of software design, development, and testing for firmware and drivers.
• Strong understanding of secure boot, measured boot, attestation, signing, Root of Trust.
• Proven leadership in software security assessment and penetration testing at SoC level.
• Demonstrated ability to identify impactful security vulnerabilities.
• Proficient in C/C++, Rust and Python for security testing and tooling.
• Background in offensive security research and leadership of test teams.
• Experience with fuzz testing activities and related tooling.
• Strong technical leadership and communication capabilities.

Responsibilities

• Develop software security test framework and processes across firmware, drivers and system software.
• Lead internal penetration test strategy for software products.
• Schedule, prioritise and conduct software security tests.
• Lead other security test engineers within the product security team and across the business.

Skills

Firmware security

Driver security

SoC security fundamentals

Fuzz testing

Penetration testing

C/C++

Rust

Python

Offensive security

Technical leadership

Communication skills

Tools

Fuzzing tooling

Security testing frameworks

Job description

United States Digital Space LLC in Cambridge is seeking an expert in security assessment of firmware, drivers and operating systems to join the Product Security team. You will lead the company\'s approach to offensive software security with a focus on fuzzing and penetration testing.

You will develop a security test framework across firmware, drivers and system software, lead internal penetration tests, and mentor other security test engineers within the product security team.