Product Security Engineer - Hardware & Firmware

Sandisk; Milpitas (CA); On-site; USD 148,000 - 245,000; Full time

Job summary

Sandisk is seeking a Product Security Engineer – Hardware/Firmware in California to strengthen cybersecurity across product lifecycles. You will partner with firmware, hardware, and product teams to guide security requirements and mitigations, focusing on hardware/firmware security, threat modeling, and risk reduction.

The role requires strong technical judgment, hands-on engagement, and the ability to communicate complex cybersecurity topics to engineering, business, and customer stakeholders.

Qualifications

• Bachelor’s degree or greater in Computer Science, Electrical Engineering, Computer Engineering, Cybersecurity, or related technical field.
• 5+ years of experience in product security, embedded systems, firmware engineering, hardware/software security, or related disciplines.
• Strong understanding of hardware and firmware security principles, embedded systems security, threat modeling, risk assessments, vulnerability management, and risk mitigation.
• Familiarity with secure boot, authentication and authorization, cryptographic protocols and libraries, firmware update security, and hardware-software interactions.
• Excellent written and verbal communication skills with the ability to communicate to technical and non-technical audiences.

Responsibilities

• Partner with firmware, hardware, and product teams to strengthen cybersecurity across product lifecycles.
• Provide guidance on implementation of security requirements and controls for hardware and firmware-based products.
• Evaluate product security posture and identify attack paths, gaps, and risk areas.
• Help product teams prioritize mitigations based on product risk, exploitability, and business objectives.
• Support product teams in balancing cybersecurity rigor with product delivery objectives and business priorities.
• Facilitate product security risk assessments and support threat modeling across firmware-driven products.
• Assess security risks across authentication/authorization, firmware update protections, secure boot, cryptographic protections, and lifecycle security.
• Evaluate security artifacts and evidence including threat modeling, SBOM, fuzzing, and remediation activities.
• Support customer, regulatory, and internal security assurance activities through technical assessment and documentation.
• Provide guidance to strengthen product security posture and scalable improvements across programs.
• Collaborate with cross-functional teams to provide clear technical direction and risk-informed guidance.

Skills

Embedded systems

Firmware engineering

Security risk assessment

Education

Bachelor’s degree or greater in Computer Science, Electrical Engineering, Computer Engineering, Cybersecurity, or related technical field

Job description

Sandisk is seeking a Product Security Engineer – Hardware/Firmware in California to strengthen cybersecurity across product lifecycles. You will partner with firmware, hardware, and product teams to guide security requirements and mitigations, focusing on hardware/firmware security, threat modeling, and risk reduction.

The role requires strong technical judgment, hands-on engagement, and the ability to communicate complex cybersecurity topics to engineering, business, and customer stakeholders.