Principal Engineer / Technical Team Lead, Hardware Security Platform at Luxoft

Luxoft; Województwo pomorskie; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

On-site work in Gdańsk

Job summary

Luxoft in Gdańsk, Poland seeks a hands-on Principal Engineer to own the end-to-end architecture of a hardware-assisted threat-detection platform. You will shape strategy across CPU telemetry, Windows systems, ML inference, and partner interfaces, while driving cross-functional delivery and high engineering standards.

You will mentor senior engineers, lead critical design reviews, and coordinate with security and software teams to ensure scalable productization.

Qualifications

• 8+ years of progressive software, systems, platform, hardware, security, or ML engineering experience.
• Experience as Principal Engineer, Staff Engineer, Senior Staff Engineer, Technical Lead, or equivalent.
• Hands-on depth in CPU/platform engineering, Windows systems, endpoint security, ML systems, or related areas.

Responsibilities

• Own end-to-end technical architecture of hardware-assisted threat-detection platform.
• Define technical strategy, interfaces, and integration model across multiple workstreams.
• Lead architectural decisions on processor telemetry, Windows kernel/components, and ML inference.
• Establish technical quality standards, design-review practices, and acceptance criteria.
• Mentor senior engineers and represent platform in client architecture reviews.

Education

University degree in computer science / electrical engineering / computer engineering / cybersecurity

Job description

This Full time on site position offers great opportunities for career growth. Project description AMD is building a hardware-assisted security platform that uses silicon-level Performance Monitoring Counters (PMCs) and on-chip machine learning to detect advanced endpoint threats, including ransomware, fileless malware, and cryptojacking, at the processor layer, below OS-based evasion, on a Windows 11 endpoint platform. The platform collects CPU behavioral telemetry, classifies it through an ML inference engine, and exposes threat signals to security-software partners through a standardized API. The project covers the full engineering path from silicon telemetry and data generation through ML training and validation, low-latency Windows runtime integration, lab qualification, and partner integration. The Technical Team Lead will own the end-to-end technical direction of the platform and coordinate decisions across CPU telemetry, Windows systems software, machine learning, security validation, and partner-facing interfaces. This is a hands-on principal engineering role combining architecture ownership, technical leadership, and cross-functional delivery. The role requires regular on-site work in Gdańsk. Additional implementation details will be shared during the recruitment process in line with the applicable confidentiality requirements.

Responsibilities

• Own the end-to-end technical architecture of the hardware-assisted threat-detection platform, covering CPU telemetry collection, Windows systems components, ML inference, partner-facing SDK/API integration, and platform security mechanisms.
• Define the technical strategy, architectural boundaries, interfaces, and integration model across the Lab, ML, and Real-Time workstreams.
• Lead cross-functional architectural decisions involving processor telemetry, Windows kernel and user-space components, model inference, system performance, endpoint-security requirements, and partner integration.
• Establish and maintain technical quality standards, architecture principles, design-review practices, and engineering acceptance criteria.
• Define measurable efficacy and performance objectives, including detection quality, false-positive behavior, inference latency, system overhead, reliability, and API compatibility.
• Lead technical evaluation of trade-offs between model quality, telemetry coverage, runtime performance, implementation complexity, and system resource consumption.
• Own the technical strategy for the partner-facing SDK/API, including interface stability, versioning, compatibility, diagnostics, and integration guidance.
• Coordinate the technical relationship with approved security-software integration partners.
• Lead end-to-end validation gates across representative workloads, threat categories, system configurations, and hardware platforms.
• Ensure that technical decisions, interfaces, assumptions, risks, and known limitations are documented and traceable.
• Identify, communicate, and mitigate program-level technical risks and cross-workstream dependencies.
• Provide hands-on technical guidance and design support when complex issues span hardware, drivers, systems software, ML, and security.
• Mentor senior engineers across the Lab, ML, and Real-Time workstreams and help them resolve cross-disciplinary technical problems.
• Represent the platform in client architecture reviews, partner discussions, and approved external technical engagements.
• Work with project stakeholders to translate technical progress, constraints, and risks into clear decisions and priorities.
• Support the transition from Proof of Concept toward a scalable productization architecture if the initial phase is successful.

Skills

• Must have 8+ years of progressive software, systems, platform, hardware, security, or machine-learning engineering experience.
• Substantial experience operating as a Principal Engineer, Staff Engineer, Senior Staff Engineer, Technical Lead, Systems Architect, or equivalent technical authority.
• Demonstrated hands-on technical depth in at least one of the following areas, with credible experience in at least one additional area: CPU and platform engineering: CPU microarchitecture, processor telemetry, PMCs/PMUs, performance profiling, platform firmware, UEFI/BIOS, silicon validation, or comparable low-level platform technologies.
• Windows systems and kernel engineering: Windows kernel-mode drivers, WDF/WDM/KMDF, driver-to-user-space communication, WinDbg, ETW/ETL, concurrency, low-latency systems, or performance-sensitive runtime development.
• Endpoint security: Endpoint-security or EDR architecture, system monitoring, behavioral detection, malware analysis, threat telemetry, security-agent development, or comparable defensive-security platforms.
• ML systems: Production ML inference pipelines, model-runtime integration, ONNX Runtime, OpenVINO, GPU/NPU inference, edge inference, or performance optimization for deployed ML models.
• Working literacy across the remaining technical areas and the ability to lead specialists without claiming equal hands-on depth in every discipline.
• Experience making and documenting architecture decisions across multiple components, engineering disciplines, or organizational boundaries.
• Experience leading a complex multi-disciplinary engineering effort from definition and prototype through integration and validation.
• Experience defining measurable technical KPIs, performance budgets, quality gates, acceptance criteria, or engineering readiness criteria.
• Ability to evaluate system-level trade-offs involving performance, reliability, security, compatibility, maintainability, and delivery risk.
• Strong technical communication skills across engineering, partner, project-management, and executive audiences.
• Ability to mentor senior engineers, facilitate design reviews, resolve technical disagreements, and drive decisions to closure.
• Ability to remain hands-on in architecture reviews, debugging, prototyping, performance analysis, or other technically complex work.
• Must be based in Gdańsk or willing to relocate to the Gdańsk area.
• University degree in computer science, electrical engineering, computer engineering, cybersecurity, or an equivalent field.
• Nice to have Experience with hardware-assisted security technologies on a major processor architecture.
• Experience architecting endpoint-security, EDR, anti-malware, behavioral-detection, or system-monitoring products.
• Familiarity with hardware performance counters, processor telemetry, instruction-based sampling, or silicon-level performance analysis.
• Experience with Windows driver development, driver signing, HLK testing, or WHQL certification processes.
• Prior WHQL delivery is useful for later productization but is not required for the Proof-of-Concept phase.
• Experience integrating machine-learning inference into low-level, performance-sensitive, edge, endpoint, or embedded systems.
• Experience with ONNX Runtime, OpenVINO, DirectML, GPU/NPU runtimes, model quantization, or inference-performance optimization.
• Experience developing SDKs or APIs for external engineering partners, including interface versioning and backward compatibility.
• Experience working with security-software vendors or managing joint technical integration programs.
• Experience with malware research, threat intelligence, safe sample handling, controlled security validation, or security-lab governance.
• Experience with silicon validation, firmware, UEFI/BIOS, hardware attestation, trusted execution, secure boot, or platform-rooted security.
• Experience defining detection-efficacy metrics, false-positive targets, performance budgets, or end-to-end validation gates.
• Experience moving an early-stage R\&d or Proof-of-Concept system toward production architecture.
• Patent portfolio, technical publications, open-source contributions, conference presentations, or standards participation in a relevant technical area.
• Other Languages English: C1 Advanced Seniority Lead Gdansk, Poland