Platform Security Auditor: Firmware & Boot Integrity Expert

United States Digital Space LLC; San Francisco (CA); Hybrid; USD 320,000 - 405,000; Full time

Job summary

United States Digital Space LLC seeks a vulnerability assessment candidate for platform security. You will audit and harden secure boot, attestation, and firmware across diverse hardware, ensuring production-ready fixes and threat models are robust.

Role requires hands-on experience with low-level security, cryptographic protocols, and cross-functional collaboration to mitigate vulnerabilities end-to-end.

Qualifications

• Proven hands-on vulnerability auditing on security-critical systems.
• Experience with secure boot, measured boot, and attestation technologies (TPM, Intel TXT, AMD SEV, ARM TrustZone).
• Strong understanding of cryptographic protocols and hardware security modules.
• Experience with UEFI/BIOS or embedded firmware security, bootloader hardening, and chain of trust.

Responsibilities

• Audit secure boot chains from firmware through OS initialization for diverse hardware platforms.
• Audit attestation systems from hardware root of trust to application layer.
• Audit measured boot implementations and runtime integrity monitoring.
• Collaborate with infrastructure teams to integrate security controls without affecting performance.
• Validate security mechanisms before production deployment.
• Conduct firmware vulnerability assessments and penetration testing.
• Build firmware vulnerability assessment pipelines for continuous security monitoring.
• Document security architectures and maintain threat models.
• Collaborate with software and hardware vendors to ensure security capabilities meet requirements.

Skills

Vulnerability auditing

Secure boot

Attestation tech

Cryptographic protocols

Firmware security

UEFI security

Low-level programming

Threat modeling

Cross-functional collaboration

Distributed systems security

Education

Bachelor's degree or equivalent

Tools

Rust

Go

Job description

United States Digital Space LLC seeks a vulnerability assessment candidate for platform security. You will audit and harden secure boot, attestation, and firmware across diverse hardware, ensuring production-ready fixes and threat models are robust.

Role requires hands-on experience with low-level security, cryptographic protocols, and cross-functional collaboration to mitigate vulnerabilities end-to-end.