Embedded Product Security Architect

Sandisk; Irvine (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Sandisk’s Security Platform team is looking for an enthusiastic product security architect to lead the security architecture function for the Flash unit’s product portfolio, spanning enterprise, client, retail, mobile and automotive.

The role defines security roadmaps, drives threat modeling, and oversees verification, validation and compliance across HW and embedded SW. Collaboration with hardware, firmware and PSA teams is essential to embed security from concept to productization.

Qualifications

• Master/PhD in electrical engineering, computer science, or a related field, preferably with embedded security specialization (HW/SW).
• 10+ years of experience in embedded product security.
• Expert understanding of practical modern cryptography.

Responsibilities

• Interface with ecosystem, PSA and product teams to gather security requirements from customers, regulatory, compliance, risk and trends.
• Define the roadmap for security architecture for Flash products, including firmware, hardware and secure manufacturing.
• Drive threat modeling and reference embedded security architectures for product lines and BU-wide adoption.
• Architect interactions between system components and peripherals.
• Lead internal security reviews of HW and embedded SW and guide external evaluations and compliance activities.
• Collaborate with hardware design, firmware development and product security assurance teams to embed security in product development.
• Promote a secure design mindset from conception to productization across projects.
• Stay current with industry security standards to raise security levels.

Skills

Embedded security

Threat modeling

Cryptography

Secure boot

Security architectures

Mentoring

Leadership

Education

Master/PhD in EE/CS (embedded security)

Tools

FIPS/CC cert experience

Secure boot tooling

Job description

Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape.

Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality.

Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward.

Description

Sandisk’s Security Platform team is looking for an enthusiastic product security architect to lead the security architecture function for the Flash business unit’s product portfolio. The security architecture team will be responsible for specifying the security solutions for Flash’s various product lines including enterprise, client, retail, mobile and automotive.

Essential Duties And Responsibilities

• Interface with ecosystem, product security assurance (PSA) and product teams to gather security requirements from customers, regulatory, compliance, risk, and industry trends.
• Define the roadmap for security architecture for Flash products, including firmware and hardware, and secure manufacturing infrastructure.
• Drive threat modeling and reference embedded security architectures for product lines and drive BU wide adoption.
• Architect interactions between various system components and peripherals.
• Contribute to requirements and strategy for verification and validation of security features.
• Lead internal security reviews of developed products (HW and/or embedded SW), and guide external evaluations and compliance activities.
• Collaborate with multi-functional teams, including hardware design, firmware development, and product security assurance, to ensure that security requirements are incorporated into product design and development processes.
• Follow and promote a secure design mindset from conception to productization across multiple projects and product lines.
• Keep abreast of emerging industry security standards and best practices to guide the team to raise the bar on security.

Qualifications

REQUIRED:

• Master/PhD degree in electrical engineering, computer science, or a related field, preferably with a specialization in embedded security (HW and/or SW)
• 10+ years of experience in embedded product security.
• Expert understanding of practical modern cryptography
• Proficient in security protocols, cryptography, authentication, attestation, authorization, secure boot, secure communication, digital signatures, certificates and post-quantum cryptography. Solid understanding of creating and validating threat models.
• Experience providing technical leadership and mentoring to other architects and/or development teams.
• Experience in driving FIPS, Common Criteria certification is an asset.

Preferred

• Knowledge of data storage controllers' architectures is strongly preferred.

Skills

• Strong analytical, problem solving and creative thinking skills.
• Strong commitment to technical quality and proper documentation during all phases of design and development.
• Excellent communication skills; interact with suppliers, senior management, and other team members professionally, in writing, in person, and virtually, as necessary.

Additional Information

Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the Equal Employment Opportunity is the Law poster.

Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [e-mail] to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.