Principal Platform Security Architect - Firmware & Linux

Camwebdir; United Kingdom; Hybrid; GBP 110,000 - 160,000; Full time

Benefits offered by this job

Relocation package

Visa sponsorship

Job summary

Arm is seeking a Principal Platform Security Architect to enhance firmware and embedded Linux security across BIOS, BMC, and device firmware. The role spans low-level security controls, boot flows, and secure management environments, with opportunities to influence both design and implementation.

The candidate will work with Yocto-based platforms, early boot stages, and platform firmware, collaborating across firmware engineering and security evaluation teams to drive robust platform security.

Qualifications

• Hands-on with embedded Linux systems and Yocto/OpenEmbedded builds.
• 0x0000
• Experience implementing and validating Linux hardening controls.
• 0x0000
• Contribute to security controls in firmware/embedded environments.
• 0x0000
• Understand BIOS/UEFI boot flows and secure boot concepts.
• 0x0000
• Experience with firmware update mechanisms and verification.
• 0x0000
• Knowledge of Arm architecture and platform firmware concepts.

Responsibilities

• Evaluate and integrate security mechanisms across BIOS, BMC, and device firmware.
• 0x0000
• Harden Linux-based management environments through system hardening and service isolation.
• 0x0000
• Identify attack surfaces and validate secure defaults in firmware and firmware–hardware paths.
• 0x0000
• Collaborate to develop validation tools and integrate security checks into CI workflows.
• 0x0000
• Support threat modeling and analysis of firmware and management plane components.

Skills

Embedded Linux

Yocto/OpenEmbedded

Linux hardening

Firmware security

C/C++

BIOS/UEFI

Secure boot

Firmware verification

Firmware update flows

Threat modeling

CI/CD security

Arm architecture

PCIe security

Tools

OpenBMC

SELinux

AppArmor

TPM/DICE

Linux security tooling

Job description

Arm is seeking a Principal Platform Security Architect to enhance firmware and embedded Linux security across BIOS, BMC, and device firmware. The role spans low-level security controls, boot flows, and secure management environments, with opportunities to influence both design and implementation.

The candidate will work with Yocto-based platforms, early boot stages, and platform firmware, collaborating across firmware engineering and security evaluation teams to drive robust platform security.