Embedded Product Security Architect

Sandisk; California (MO); On-site; USD 180,000 - 270,000; Full time

Job summary

Sandisk’s Security Platform team is seeking a product security architect to lead the security architecture for the Flash business unit’s portfolio, spanning enterprise, client, retail, mobile and automotive.

You will define roadmaps, drive threat modeling, and collaborate with hardware, firmware and PSA teams while mentoring other architects. Stay current with evolving security standards and best practices across multiple product lines.

Qualifications

• Master/PhD in electrical engineering, computer science, or a related field, preferably with a specialization in embedded security (HW and/or SW)
• 10+ years of experience in embedded product security
• Expert understanding of practical modern cryptography
• Proficient in security protocols, cryptography, authentication, attestation, authorization, secure boot, secure communication, digital signatures, certificates and post-quantum cryptography
• Experience providing technical leadership and mentoring to other architects and/or development teams
• Experience in driving FIPS, Common Criteria certification is an asset

Responsibilities

• Define the roadmap for security architecture for Flash products, including firmware and hardware, and secure manufacturing infrastructure
• Drive threat modeling and reference embedded security architectures for product lines and drive BU wide adoption
• Lead internal security reviews of developed products (HW and/or embedded SW), and guide external evaluations and compliance activities
• Collaborate with multi-functional teams to ensure security requirements are incorporated into product design and development processes

Skills

Embedded security

Security architecture

Threat modeling

Mentoring/leadership

Communication skills

Education

Master's or PhD in Electrical Engineering / Computer Science

Tools

FIPS/Common Criteria knowledge

Job description

Sandiskunderstands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape.

Sandiskmeets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibilityforward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globallyforinnovation, performance and quality.

Sandiskhas two facilities recognized by the World Economic Forum as part of the Global Lighthouse Networkforadvanced 4IR innovations. These facilities were also recognized as Sustainability Lighthousesforbreakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world movingforward.

SanDisk’s Security Platform team is looking for an enthusiastic product security architect to lead the security architecture function for the Flash business unit’s product portfolio. The security architecture team will be responsible for specifying the security solutions for Flash’s various product lines including enterprise, client, retail, mobile and automotive.

• Interface with ecosystem, product security assurance (PSA) and product teams to gather security requirements from customers, regulatory, compliance, risk, and industry trends.
• Define the roadmap for security architecture for Flash products, including firmware and hardware, and secure manufacturing infrastructure.
• Drive threat modeling and reference embedded security architectures for product lines and drive BU wide adoption.
• Architect interactions between various system components and peripherals.
• Contribute to requirements and strategy for verification and validation of security features.
• Lead internal security reviews of developed products (HW and/or embedded SW), and guide external evaluations and compliance activities.
• Collaborate with multi-functional teams, including hardware design, firmware development, and product security assurance, to ensure that security requirements are incorporated into product design and development processes.
• Follow and promote a secure design mindset from conception to productization across multiple projects and product lines.
• Keep abreast of emerging industry security standards and best practices to guide the team to raise the bar on security.

REQUIRED:

• Master/PhD degree in electrical engineering, computer science, or a related field, preferably with a specialization in embedded security (HW and/or SW)
• 10+ years of experience in embedded product security.
• Expert understanding of practical modern cryptography
• Proficient in security protocols, cryptography, authentication, attestation, authorization, secure boot, secure communication, digital signatures, certificates and post-quantum cryptography.Solid understanding of creating and validating threat models.
• Experience providing technical leadership and mentoring to other architects and/or development teams.
• Experience in driving FIPS, Common Criteria certification is an asset.

PREFERRED:

• Knowledge of data storage controllers' architectures is strongly preferred.

SKILLS:

• Strong analytical, problem solving and creative thinking skills.
• Strong commitment to technical quality and proper documentation during all phases of design and development.
• Excellent communication skills; interact with suppliers, senior management, and other team members professionally, in writing, in person, and virtually, as necessary.

Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics

We also prohibit harassment of any individual on any of the characteristics listed above

Our non-discrimination policy applies to all aspects of employment

We comply with the laws and regulations set forth in the Know Your Rights: Workplace Discrimination is Illegal poster

Our pay transparency policy is available here

Sandisk thrives on the power and potential of diversity

As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within

We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us

We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution

Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [e-mail] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

#LI-RT1

Compensation & Benefits Details

• An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.
• The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.
• You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan.RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards.
• We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan.
• Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.