Staff Software Security Engineer

arm limited; Cambridge; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading technology company is seeking a Staff Software Security Engineer to drive improvements in software security and processes. In this pivotal role within the Product Security team, you will develop assessment methodologies, conduct security reviews, and foster a strong security culture. The role requires deep expertise in secure coding and vulnerability assessment methods.

Benefits

Attractive relocation package

Dynamic and inclusive workplace

Qualifications

• Deep knowledge in software threat models.
• Experience in writing secure code for firmware and drivers.
• Knowledge of industry standard fuzzing tools.

Responsibilities

• Develop software security assessment methodology.
• Conduct security assessments and code reviews.
• Review output of security testing including DAST, SAST, SCA.

Skills

Software threat models

Secure coding

Fuzzing tools

Secure code reviews

Software Composition Analysis

Job description

Social network you want to login/join with:

Staff Software Security Engineer, Cambridge

col-narrow-left

Client:

arm limited

Location:

Cambridge, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

7a832e105a04

Job Views:

21

Posted:

22.06.2025

Expiry Date:

06.08.2025

col-wide

Job Description:

The Role

Job Overview:

We are seeking a skilled and passionate security engineer to lead the central software security testing program across software in Arm. The role is within Arm's multifaceted Product Security team. You will have the opportunity to drive improvements in security of Arm software, and processes, and build security culture.

Responsibilities:

• Develop comprehensive software security assessment methodology.
• Conduct security assessments and code reviews to identify and remediate vulnerabilities in firmware and system software.
• Review and advise on output of security testing, including DAST, SAST, SCA
• Advance baseline for security testing across Arm's software.
• Develop software fuzz testing strategy at Arm.
• Enable engineering teams to implement security testing independently.
• Keep up-to-date with industry best practices and developments in software security.

Required Skills and Experience :

• Deep knowledge and expertise in developing and reviewing software threat models.
• Experience writing secure code, and designing secure software specifically for low level software such as drivers, firmware.
• Knowledge of well known industry standard fuzzing tools such as AFL, libfuzzer, syzcaller.
• Demonstrated skills for secure code reviews (C/C++) of complex software projects.
• Experience in performing Software Composition Analysis using tools such as Black Duck

“Nice To Have” Skills and Experience :

• Expericence working with Arm's open source software.
• Knowledge of Arm assembly.
• Expericence in penetration testing.
• Delivered software security training.
• Experience in configuration and creation of rules for SAST tools such as Coverity and SonarQube.
• Experience in performing root cause analysis for security issues.
• Experience working with relevant security certification schemes (, PSA Certified, common criteria, SESIP) and international standards (, ISO 21434, IEC 62443).

In Return:

Arm is committed to global talent acquisition, offering an attractive relocation package. With offices worldwide, Arm is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to Arm's success in the global marketplace.