Principal Product Security Engineer

United States Digital Space LLC; Cambridge; On-site; GBP 120,000 - 160,000; Full time

Job summary

United States Digital Space LLC in Cambridge is seeking an expert in security assessment of firmware, drivers and operating systems to join the Product Security team. You will lead the company\'s approach to offensive software security with a focus on fuzzing and penetration testing.

You will develop a security test framework across firmware, drivers and system software, lead internal penetration tests, and mentor other security test engineers within the product security team.

Qualifications

• Deep knowledge of software design, development, and testing for firmware and drivers.
• Strong understanding of secure boot, measured boot, attestation, signing, Root of Trust.
• Proven leadership in software security assessment and penetration testing at SoC level.
• Demonstrated ability to identify impactful security vulnerabilities.
• Proficient in C/C++, Rust and Python for security testing and tooling.
• Background in offensive security research and leadership of test teams.
• Experience with fuzz testing activities and related tooling.
• Strong technical leadership and communication capabilities.

Responsibilities

• Develop software security test framework and processes across firmware, drivers and system software.
• Lead internal penetration test strategy for software products.
• Schedule, prioritise and conduct software security tests.
• Lead other security test engineers within the product security team and across the business.

Skills

Firmware security

Driver security

SoC security fundamentals

Fuzz testing

Penetration testing

C/C++

Rust

Python

Offensive security

Technical leadership

Communication skills

Tools

Fuzzing tooling

Security testing frameworks

Job description

Job ID: 2024-12792

Date posted: Jul. 11, 2026

Location: Cambridge, United Kingdom

Category: Software Engineering

Job Overview:

We are looking for an expert in security assessment of firmware, drivers, and operating systems to join the company's Product Security team. In this role, you will lead the company's approach to offensive software security with specific focus on fuzzing and penetration testing.

Responsibilities:

• Develop software security test framework and processes across the company's firmware, drivers and system software
• Lead the company's internal penetration test strategy for software products
• Schedule, prioritise and conduct software security tests
• Lead other security test engineers within the product security team and across the business

Required Skills and Experience :

• Deep knowledge and expertise in design, development, documentation and testing of software specifically for low lever software such as firmware and drivers
• Strong understandings of SoC security fundamentals such as secure boot, measured boot, attestation, signing, Root of Trust
• Proven knowledge in leading software security assessment and penetration testing preferably at SoC level
• Demonstrated skills for finding security vulnerabilities "which matter"
• Professional knowledge of software languages (such as C/C++, Rust, Python)
• Strong background in offensive security research
• Knowledge of the company assembly, the company based SoCs and devices
• Experience in leading fuzz testing activities and with tooling
• Capable of providing technical leadership
• Good interpersonal and communication skills

“Nice To Have” Skills and Experience :

• Experience in performing security assessment on products towards external security certification such as common criteria, PSA, SESIP, FIPS
• Have participated in CTFs, Hackathons, or similar events
• Have published work within the offensive security domain at leading venues
• Expericence with security evaluation of Linux kernel security, Android OS security, Windows systems and drivers security
• Experience in security of GPU/CPU/System firmware and drivers
• Professional certifications such as OSCP/OSEE

In Return :

With offices worldwide, the company is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to the company's success in the global marketplace.