Security Engineer – Hardware Root of Trust & Secure Boot

Fractile; London Borough of Southwark; On-site; GBP 90,000 - 130,000; Full time

Job summary

Fractile is building the future of secure hardware for frontier AI systems. The role focuses on turning threat models into concrete security mechanisms across bare metal, RTOS, and embedded Linux.

You will work closely with architecture and hardware teams to secure the control chain from boot to runtime. We are seeking engineers with deep security judgement, system-level experience, and hands-on expertise in secure boot, root of trust, cryptography, and key management.

Qualifications

• Strong security background in real systems and embedded software.
• Hands-on with secure boot, root of trust, cryptography, and key management.
• Experience designing secure protocols and channels.
• Proficient in C and Rust with focus on memory safety.

Responsibilities

• Shape security of the control chain with threat modeling across platforms.
• Design secure boot and root of trust on controllers with signing and anti-rollback.
• Secure interconnects with authentication and integrity checks.
• Develop cryptographic mechanisms: key hierarchies and device identity.
• Ensure end-to-end firmware updates with signed images and rollback protection.
• Harden the host Linux kernel and the on-die firmware.
• Collaborate with HW and software teams to embed security and drive fixes.

Skills

Security engineering

C

Rust

Threat modeling

Job description

Fractile is building the future of secure hardware for frontier AI systems. The role focuses on turning threat models into concrete security mechanisms across bare metal, RTOS, and embedded Linux.

You will work closely with architecture and hardware teams to secure the control chain from boot to runtime. We are seeking engineers with deep security judgement, system-level experience, and hands-on expertise in secure boot, root of trust, cryptography, and key management.