Senior Firmware Security Assurance Architect

Sandisk; Milpitas (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Sandisk is seeking a seasoned Product Security Assurance Architect to strengthen security across firmware-driven products and storage platforms. You will conduct independent technical security assessments, evaluate controls, and partner with engineering teams to reduce risk from attacker-informed analyses.

Responsibilities include threat modeling, exploitability analysis, SDL lifecycle assurance, and collaboration with PSIRT, firmware, ASIC, and product engineering to deliver robust security

Qualifications

• Degree in computer science, electrical engineering, cybersecurity, or related field.
• 10+ years of experience in firmware or embedded security.
• Strong attacker mindset and threat modeling expertise.
• Experience communicating security risks to engineers and leadership.
• Familiarity with secure development lifecycle and security assessments.

Responsibilities

• Perform independent security assessments of firmware-driven products and embedded platforms.
• Evaluate control effectiveness and architecture from an assurance perspective.
• Lead threat modeling and exploitability analysis across firmware and embedded systems.
• Advance SDL effectiveness and evidence readiness across product teams.
• Collaborate with PSIRT, engineering, firmware, ASIC, and validation teams.
• Translate findings into practical mitigations and engineering guidance.
• Support customer security inquiries, assessments, and audits.

Skills

Firmware security

Embedded security

Threat modeling

Exploitability analysis

SDL practices

Security assessment

Communication skills

Education

Bachelor’s/Master’s/PhD in CS/EE/Cybersecurity

Job description

Sandisk is seeking a seasoned Product Security Assurance Architect to strengthen security across firmware-driven products and storage platforms. You will conduct independent technical security assessments, evaluate controls, and partner with engineering teams to reduce risk from attacker-informed analyses.

Responsibilities include threat modeling, exploitability analysis, SDL lifecycle assurance, and collaboration with PSIRT, firmware, ASIC, and product engineering to deliver robust security