Senior Firmware Security Architect - SDV Chain of Trust

42dot; Sunnyvale (CA); Vor Ort; USD 189.000 - 267.000; Vollzeit

Zusammenfassung

42dot is seeking a Sr. Staff Firmware Security Architect to own end-to-end security architecture for the SDV real-time platform. You will define boot chain, Uptane trust, hardware root of trust, cryptographic policy, and collaborate with OEM security engineers and safety leads.

You will review boot/update code, gate releases, and drive vulnerability response across the CI/CD path, with strong ownership of security requirements and evidence for audits.

Qualifikationen

• 15+ years in embedded/firmware engineering with 6+ years in security.
• Own a production secure-boot or chain-of-trust design on MCU-class silicon.
• Practitioner-level cryptography knowledge and HSM programming.
• Hands-on with TUF/Uptane trust models or an equivalent signed-metadata update system; design or review of a production update path.
• Familiarity with ISO/SAE 21434 and UNECE R155/R156.
• C proficiency to review boot/update code and HSM API usage.

Aufgaben

• Define multi-stage secure boot sequence with boot budgets and hardware anchoring.
• Own on-device Uptane security design, metadata policy and verification.
• Specify key hierarchy, secure storage, attestation, provisioning and revocation.
• Define cryptographic policy and post-quantum migration path for firmware signing.
• Draft deployment profiles and edge-to-cloud security interfaces.
• Define hardware-enforced isolation between boot stages and services.
• Define secure diagnostics and in-vehicle network security requirements.
• Ensure ISO/SAE 21434 compliance and evidence for OEM CSMS/SUMS.
• Oversee vulnerability handling and PSIRT interfaces.

Kenntnisse

Chain-of-Trust Ownership

Applied Cryptography

Update Security

ISO/SAE 21434 Authorship

Code-Level Depth

Technical Writing

Vulnerability Response

Threat Modeling

Ausbildung

15+ years embedded/firmware security experience

Tools

NXP HSE/CSE

Infineon AURIX HSM

EVITA-class security

TUF/Uptane

HSM/secure-element programming

Jobbeschreibung

42dot is seeking a Sr. Staff Firmware Security Architect to own end-to-end security architecture for the SDV real-time platform. You will define boot chain, Uptane trust, hardware root of trust, cryptographic policy, and collaborate with OEM security engineers and safety leads.

You will review boot/update code, gate releases, and drive vulnerability response across the CI/CD path, with strong ownership of security requirements and evidence for audits.