Product Security Engineer - Audio Tech

Bose Corporation, U.S.A; Massachusetts; On-site; USD 120,000 - 170,000; Full time

Job summary

Bose Corporation is seeking a Security Engineer to strengthen product security across our Audio Technology domain. You will drive secure development practices, protect proprietary technologies, and embed security throughout the lifecycle of our embedded systems.

The role focuses on protecting IP, implementing TrustZone, encryption, and secure updates while collaborating with firmware, DevOps, and cloud teams to safeguard Bose products.

Qualifications

• Experience delivering licensed software for customer products and systems you may not fully trust.
• Hands-on firmware protection: secure boot, encryption, signing, and anti-tamper controls.
• Experience with embedded firmware or algorithm binaries and obfuscation.
• IP protection and anti-tamper measures in embedded systems.
• C/C++ development for embedded Linux platforms.
• Strong cryptographic knowledge including certificates and HSMs.
• Collaboration across cross-functional engineering teams in the lifecycle.

Responsibilities

• Architect and implement protections for IP and anti-reverse engineering.
• Collaborate with product firmware, DevOps, and cloud engineering teams.
• Design secure products ensuring data confidentiality and integrity.
• Develop ARM TrustZone secure applets and device identity concepts.
• Manage secrets, cryptography, and credential handling.
• Define security requirements and perform assessments.
• Integrate firmware encryption, signing, and secure update processes.
• Stay current on security standards and support audits.

Skills

Firmware security

C/C++ development

Cryptography

Embedded systems security

Secure boot & signing

Education

Bachelor's degree in Computer Science or equivalent

Master's degree beneficial

Tools

Linux

Hardware security concepts (HSMs, TrustZone)

Job description

At Bose Corporation, we believe sound is the most powerful force on earth - and for over 60 years, we have been a company built on innovation, excellence, and independence. Privately owned, fiercely customer-focused, and driven by our values, we continue to lead industries and transform lives through sound.

Today, Bose Corporation is entering an exciting new era. Across multiple global Business Units and Global Functions, we are shaping the future of audio technology, automotive, luxury, and premium experiences. We invite you to join us in this transformation.

Job Description

Join the future of product security at Bose. At Bose, security and stability are the two pillars of our product innovation. We are seeking a Security Engineer to support the product security initiatives of our growing Audio Technology business. You will play a central role in securing Bose's proprietary audio technologies. As Bose continues to innovate, there is a constant need to protect our intellectual property and embed security throughout the development lifecycle. The ideal candidate has extensive experience in secure software development within a fast-paced, agile product environment. Join our Product Security team to help power the next wave of innovation at Bose.

Principal Duties and Responsibilities

• Architecting and implementing protections for intellectual property, including anti-reverse engineering, secure firmware distribution, and debug interface lockdown
• Collaborating with cross-functional teams including product firmware, Audio Technology, DevOps, cloud engineering, manufacturing, and program management
• Architecting and designing products to guarantee secure practices, data confidentiality, and system integrity
• Engineering and implementing ARM TrustZone secure applets, implementing a cryptographic IoT device identity and root of trust
• Streamlining secrets, key management, cryptography, and credential management
• Defining security requirements and conducting security assessments
• Implementing firmware and intellectual property (IP) protection mechanisms to safeguard proprietary software and embedded technologies
• Performing obfuscation of firmware and algorithm binaries to protect against reverse engineering and unauthorized modification
• Integrating firmware encryption, digital signing, and integrity verification into embedded software and secure update processes
• Ensure compliance with applicable security regulations and standards (e.g., EU CRA, ETSI EN 303 645, NIST) and support audits and certifications
• Advising engineering peers on security matters in the form of architectural guidance, code/design reviews, and solution development
• Improving vulnerability discovery, patching processes, and leading responses to external security threats
• Performing security testing on products and supporting security fix implementations
• Designing and maintaining private X.509 and JWK chains of trust used for validating the authenticity of portable audio devices
• Stay up-to-date on security news, relevant technologies, user groups, industry trends, and emerging security opportunities
• Be a stakeholder on interdisciplinary teams advocating for security

Qualifications

• Experience delivering licensed software that runs on customer products and systems where you do not trust the system it runs on.
• Hands-on experience implementing firmware protection mechanisms, including secure boot, firmware encryption, digital signing, secure firmware distribution, and anti-tamper controls
• Experience implementing binary obfuscation and anti-reverse engineering techniques for embedded firmware or proprietary algorithm binaries
• Experience implementing IP protection and anti-tamper mechanisms in embedded systems, including secure boot enforcement, firmware encryption, and hardware debug port protection
• Experience developing for embedded systems and Linux platforms in C/C++.
• Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules (HSMs)
• Experience collaborating with cross-functional engineering teams to integrate security controls into embedded products throughout the development lifecycle
• Bachelor's degree in Computer Science or equivalent. A master's degree is beneficial
• 6 or more years of industry experience working in firmware development with a focus on security. An advanced degree can contribute toward experience

Optional Qualifications that would be Nice to Have

• Experience aligning embedded product security practices with regulatory and compliance requirements (EU CRA, NIST, ISO 27001, IEC 62443, or similar frameworks)
• Building internal