Staff Security Engineer: Trusted Hardware & Firmware

Fractile Ltd.; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Equity

Private medical

Pension

Holiday

Job summary

Fractile Ltd. is seeking a senior security engineer to shape the security architecture of our end-to-end inference hardware stack.

You will work across bare metal, RTOS, and Linux, turning threat models into concrete mechanisms, and collaborating with architecture and hardware teams to lock down boot, attestation, and device identity. You’ll contribute to secure-by-design practices, balancing silicon and software protections, and drive fixes through vulnerability triage and incident response.

Qualifications

• Strong C and Rust experience across systems programming
• Experience with threat modelling and security engineering in hardware/software co-design
• Knowledge of memory-safe coding practices and defensive security
• Experience designing secure protocols and authentication mechanisms
• Experience building secure boot, root of trust, and attestation flows would be valuable

Responsibilities

• Shape the security of the control chain across devices and racks
• Design and implement secure boot, root of trust, and attestation flows
• Hardening across bare metal, RTOS, and Linux environments
• Develop cryptographic and provisioning mechanisms for device identity
• Ensure end-to-end secure firmware update processes
• Collaborate with hardware and software teams to triage vulnerabilities and drive fixes

Skills

C

Rust

Threat modelling

Memory safety

Defensive coding

Secure protocol design

Job description

Fractile Ltd. is seeking a senior security engineer to shape the security architecture of our end-to-end inference hardware stack.

You will work across bare metal, RTOS, and Linux, turning threat models into concrete mechanisms, and collaborating with architecture and hardware teams to lock down boot, attestation, and device identity. You’ll contribute to secure-by-design practices, balancing silicon and software protections, and drive fixes through vulnerability triage and incident response.