Senior SoC & Firmware Security Engineer

ARM LIMITED; Saffron Walden; On-site; GBP 65,000 - 90,000; Full time

Job summary

Arm is seeking a Product Security Engineer in the UK to secure SoC and embedded firmware architectures from the ground up. You will review firmware and SoC design for security risks, perform threat modeling, and conduct hands-on testing, collaborating across teams to embed security in the product lifecycle.

You will evaluate secure boot, rollback protection, memory isolation, and trusted execution environments, and conduct thorough C/C++ security reviews to identify flaws.

Qualifications

• Proven experience securing hardware-firmware interfaces or embedded systems.
• Strong hands-on expertise in C/C++ security code reviews.
• Background in secure boot, key provisioning, firmware hardening, and trusted computing.

Responsibilities

• Review firmware and SoC architecture for security risks and threat models.
• Evaluate critical security features like secure boot, rollback protection, memory isolation, and TEE.
• Perform C/C++ security code reviews to spot implementation-level flaws.
• Conduct targeted hands-on tests to validate security concerns when needed.
• Collaborate with cross-functional teams to embed security into the development lifecycle.
• Help shape secure firmware architectures for key handling, update flows, and hardware-backed protections.
• Communicate risks and solutions clearly to both technical and non-technical audiences.
• Excellent collaboration, communication, and documentation skills.

Skills

Embedded security

C/C++ security

Secure boot

TrustZone

Threat modeling

Code reviews

Firmware hardening

Hardware interfaces

Side-channel security

Job description

Arm is seeking a Product Security Engineer in the UK to secure SoC and embedded firmware architectures from the ground up. You will review firmware and SoC design for security risks, perform threat modeling, and conduct hands-on testing, collaborating across teams to embed security in the product lifecycle.

You will evaluate secure boot, rollback protection, memory isolation, and trusted execution environments, and conduct thorough C/C++ security reviews to identify flaws.