Platform Security Architect: Firmware & Embedded Linux

Arm; Cambridge; Hybrid; GBP 126,200 - 170,800; Full time

Benefits offered by this job

Relocation package (visa sponsorship)

Job summary

Arm is seeking a Platform Security Architect in Cambridge to design and improve security across firmware and embedded Linux environments. The role spans BIOS, BMC, platform firmware, and Linux‑based management environments.

Collaboration with firmware/engineering teams will drive secure boot, firmware verification, update flows, and hardening across devices. Responsibilities include strengthening boot chains, system hardening, validating security controls, and integrating security checks into CI

Qualifications

• Hands-on with embedded Linux and Yocto/OpenEmbedded
• Experience implementing Linux hardening controls
• Experience with firmware/security in embedded environments
• Understanding BIOS/UEFI, bootloaders, firmware components
• Experience with firmware update mechanisms and secure boot
• Knowledge of Arm architecture and PCIe security impacts
• Developing automation/validation tools for CI pipelines
• Proficiency in C/C++ for embedded systems
• Familiarity with file systems and data protection methods

Responsibilities

• Firmware Security: evaluate and integrate security across BIOS, BMC, and device firmware
• Embedded Linux & BMC Security: hardening and secure configuration
• System Hardening: identify attack surfaces; apply secure defaults
• Security Validation & CI: develop tests and integrate checks into CI
• Threat Analysis: model threats for firmware and management plane

Skills

Embedded Linux

Secure boot

Firmware security

C/C++

BIOS/UEFI

CI automation

Threat modeling

Linux hardening

OpenBMC familiarity

Tools

Yocto/OpenEmbedded

SELinux/AppArmor

Job description

Arm is seeking a Platform Security Architect in Cambridge to design and improve security across firmware and embedded Linux environments. The role spans BIOS, BMC, platform firmware, and Linux‑based management environments.

Collaboration with firmware/engineering teams will drive secure boot, firmware verification, update flows, and hardening across devices. Responsibilities include strengthening boot chains, system hardening, validating security controls, and integrating security checks into CI