Offensive Firmware Security Engineer

MediaTek; San Jose (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Comprehensive health insurance

Life and disability insurance

Parental leave

401K

Job summary

A leading semiconductor company located in San Jose is seeking a Security Engineer to perform security architecture design reviews, identify vulnerabilities, and collaborate with engineering teams. The ideal candidate should have a BS+ degree in a related field and 7+ years of relevant experience. The range is competitive, from $180,000 to $260,000 annually, with additional performance-based bonuses.

Qualifications

• 7+ years of relevant work experience.
• Excellent at multitasking and prioritizing.
• Motivated by pursuing difficult and novel problems.

Responsibilities

• Perform security architecture design review and threat analysis.
• Identify vulnerabilities in firmware and drive remediation.
• Collaborate with engineering teams to solve security issues.

Skills

Programming background in ARM/RISCV assembly

Python

C

C++

RUST

Knowledge of embedded system architecture and security

Experience with secure code review

Education

BS+ in Computer Engineering, Computer Science, or Electrical Engineering

Tools

JTAG

IDA Pro

Ghidra

Job description

• Perform security architecture design review and threat analysis of firmware and hardware , to ensure security properties and robustness of our complex software products
• Identify vulnerabilities in our firmware, build proof of concepts, and drive remediation via secure code reviews, fuzz and penetration testing
• Recommend security controls, evangelize and drive adoption of new or improved tools, practices, and plans to increase product robustness and reliability.
• Collaborate with engineers, customers, and/or partners to perform internal or external security audits on our products to ensure the security quality.
• Respond to product security incidents, coordinate engineering teams and partners to solve security related issues
• Work with other parts of our company on a broad range of technologies and initiatives to enhance security.
• Research and exploit side-channel, fault, and advanced physical attacks

Requirement

• BS+ in Computer Engineering, Computer Science, or Electrical Engineering.
• 7+ years of relevant work experience
• Programming background in ARM/RISCV assembly, Python, C, C++, and/or RUST
• Knowledge of embedded system architecture and security (e.g. Android/Linux, ARM trust zone, hypervisor/virtualization…etc.).
• Knowledge of hardware/software vulnerabilities and their exploit techniques
• Experience with security design review or threat modeling throughout hardware to software.
• Experience with secure code review, analysis, vulnerability assessment, hacking/attack analysis.
• Motivated by pursuing difficult and novel problems in a highly complex environment
• Excellent at multitasking, organizing, and prioritizing complex projects to meet deadlines
• Listens for nuances and digs into details to understand systems deeply

Preferred Requirement

• experience on any automotive grade platform such as AUTOSAR, QNX, Android Automotive, etc.
• JTAG, debugging, binary instrumentation frameworks, Reverse-engineering (IDA Pro, Ghidra)
• ISO21434 or ISO 26262 compliance experience
• TARA or HARA methodology and execution experience
• CACSE (Certified Automotive Cyber-Security Expert) certificate
• CACSP (Automotive Cyber-Security Professional) certificate

Salary range: $180,000- $260,000

Employee may be eligible for performance bonus, short and long term incentive programs. Actual total compensation will be dependent upon the individual's skills, experience and qualifications. In addition, MediaTek provides a variety of benefits including comprehensive health insurance coverage, life and disability insurance, savings plan, Company paid holidays, Paid time off (PTO), Parental leave, 401K and more.

MediaTek is an Equal Opportunity Employer that is committed to inclusion and diversity to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Industries

  Semiconductor Manufacturing

Referrals increase your chances of interviewing at MediaTek by 2x

Sign in to set job alerts for “Security Engineer” roles.

Mountain View, CA $180,000.00-$210,000.00 1 month ago

Santa Clara, CA $135,000.00-$250,000.00 5 months ago

Software Engineer II (Full Time) United States

San Jose, CA $123,600.00-$174,000.00 5 days ago

Mountain View, CA $125,000.00-$188,000.00 1 month ago

Palo Alto, CA $175,000.00-$200,000.00 2 weeks ago

San Francisco Bay Area $115,000.00-$160,000.00 1 month ago

Fremont, CA $100,000.00-$160,000.00 2 weeks ago

Menlo Park, CA $147,000.00-$208,000.00 2 weeks ago

Security Engineer - Security Risk Management

Redwood City, CA $100,000.00-$150,000.00 6 days ago

San Jose, CA $166,400.00-$222,100.00 2 hours ago

Sunnyvale, CA $141,000.00-$202,000.00 1 week ago

Information Security Engineer - Generalist

Senior Infrastructure and Security Engineer

Security Engineer, Detection & Incident Response

Senior Security Engineer - Northwest region (San Jose, CA)

Palo Alto, CA $175,000.00-$225,000.00 1 hour ago

Software Engineer, Credit Cards & Banking Platform

Security Engineer Investigator, Insider Trust

Mountain View, CA $204,000.00-$259,000.00 1 week ago

Security Engineer, Google Distributed Cloud Air-Gapped Compliance

Sunnyvale, CA $197,000.00-$291,000.00 1 week ago

Senior Security Engineer, Endpoint Security

Software Engineer - Mapping & Localization

San Jose, CA $130,000.00-$182,000.00 1 month ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.