Platform Security Tech Lead

020 Cisco Systems, Inc.; Milpitas (CA); On-site; USD 187,000 - 268,000; Full time

Job summary

Cisco’s Platform Security team protects the infrastructure powering the internet. As a Technical Leader, you will steer the architecture, development, and integration of robust security solutions across hardware, firmware, Linux and networking OS such as SONiC to establish a secure chain of trust.

You will define security strategies (Root of Trust, Secure/Measured Boot, attestation), oversee UEFI Secure Boot deployment, and mentor engineers across hardware, firmware and software domains to

Qualifications

• Bachelor’s degree with 8 years of related experience or Master’s with 6 years or PhD with 3 years of related experience.
• Minimum 5 years of experience in C/C++ and Python/shell, with debugging across firmware, Linux, and hardware layers.
• Minimum 8 years of experience in platform, firmware, or system security.

Responsibilities

• Define comprehensive platform security strategies including Root of Trust, Secure/Measured Boot, attestation, firmware integrity and key lifecycle management.
• Drive the implementation of UEFI Secure Boot (PK, KEK, db, dbx), including enrollment, rotation, revocation, and debug processes.
• Integrate security protocols into Linux and SONiC environments, focusing on ONIE, kernel integrity, driver security, and firmware update mechanisms.
• Define and manage manufacturing and field provisioning of keys and certificates to ensure platform identity.
• Conduct thorough platform threat modeling, lead security reviews, and mentor engineering teams across hardware, firmware, and software domains.

Skills

C/C++

Python

Firmware debugging

Linux

SONiC

UEFI Secure Boot

Root of Trust

Threat modeling

Mentorship

Education

Bachelor’s degree in related field

Master’s degree in related field

PhD in related field

Tools

OpenBMC

Caliptra/DICE

PKI/X.509

Job description

Cisco’s Platform Security team protects the infrastructure powering the internet. As a Technical Leader, you will steer the architecture, development, and integration of robust security solutions across hardware, firmware, Linux and networking OS such as SONiC to establish a secure chain of trust.

You will define security strategies (Root of Trust, Secure/Measured Boot, attestation), oversee UEFI Secure Boot deployment, and mentor engineers across hardware, firmware and software domains to