Platform Security Engineer: Attestation & Trusted Boot

HushOne, Inc.; Kirkland (WA); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Stock options

401(k) with company match

AI tokens

Gym membership

Medical, dental and vision

Job summary

HushOne, Inc. is seeking a hardware security engineer to integrate roots of trust, protected key storage, measured boot, and attestation.

You will evaluate TPMs and secure elements and coordinate with hardware and firmware teams to ground product decisions in cryptographic primitives. In the first 90 days you will design a policy for a device with valid identity but unexpected firmware measurements, and you will explain what attestation does not prove, including potential side-channel limits.

Qualifications

• Experience in hardware security or low-level platform security.
• Ability to explain why attestation does not prove an agent’s decision or that side channels are closed.
• Hands-on work with secure boot, device identity, or a trusted execution environment.

Responsibilities

• Integrate roots of trust, protected key storage, measured boot and attestation.
• Evaluate TPMs, secure elements and TEEs against a defined threat model.
• Coordinate provisioning, debug access and lifecycle changes with hardware and firmware teams.

Skills

Hardware security

Low-level security

Secure boot

Device identity

Trusted Execution Environment

TPM

Secure Enclave

TrustZone

Tools

TPM

Secure Enclave

TrustZone

Job description

HushOne, Inc. is seeking a hardware security engineer to integrate roots of trust, protected key storage, measured boot, and attestation.

You will evaluate TPMs and secure elements and coordinate with hardware and firmware teams to ground product decisions in cryptographic primitives. In the first 90 days you will design a policy for a device with valid identity but unexpected firmware measurements, and you will explain what attestation does not prove, including potential side-channel limits.