Senior Product Security Engineer

Bose Corporation; Framingham, Northern (MA, KY); On-site; USD 143,000 - 196,000; Full time

Benefits offered by this job

Bonus programs

Health benefits

401(k) plan

Employee discounts

Job summary

Bose Corporation in Framingham, MA, seeks a Security Engineer to advance product security across consumer electronics. You will architect secure practices, implement TrustZone applets and root of trust, and lead cryptographic and key-management efforts for secure firmware and devices.

Role requires 6+ years in firmware with security, C/C++ on embedded Linux, and strong cryptography knowledge. Collaborative, cross-functional work and adherence to security standards are expected.

Qualifications

• 6+ years in firmware development with security focus
• Experience for embedded systems and Linux in C, C++
• Strong cryptographic theory and engineering including encryption, hashing, signing, digital certificates and HSMs
• Building internal security applications with cryptographic guarantees such as firmware encryption and signing
• Experience aligning embedded product security practices with regulatory and compliance requirements (EU CRA, NIST, ISO 27001, IEC 62443)
• Experience implementing IP protection and anti-tamper mechanisms in embedded systems

Responsibilities

• Architect secure products and data confidentiality
• Implement ARM Trust Zone applets and root of trust
• Manage secrets, keys, cryptography and credentials
• Define security requirements and conduct assessments
• Protect IP with anti-reverse engineering, secure firmware distribution and debug lockdown
• Ensure compliance and support audits
• Advise engineering on security architecture and reviews
• Improve vulnerability discovery and patching
• Code independently and design system architecture
• Collaborate with cross-functional teams
• Perform security testing and fixes
• Maintain X.509 and JWK chains of trust
• Stay current on security news and trends
• Be a stakeholder on interdisciplinary teams

Skills

Embedded systems

C/C++

Linux platforms

Cryptography

Security engineering

Firmware signing

IP protection

Threat mitigation

Networking security

Education

Bachelor's degree in CS

Master's degree beneficial

Job description

At Bose Corporation, we believe sound is the most powerful force on earth — and for over 60 years, we have been a company built on innovation, excellence, and independence. Privately owned, fiercely customer-focused, and driven by our values, we continue to lead industries and transform lives through sound. Today, Bose Corporation is entering an exciting new era. Across multiple global Business Units and Global Functions, we are shaping the future of audio technology, automotive, luxury, and premium experiences. We invite you to join us in this transformation.

Join the future of product security at Bose. At Bose, security and stability are the two pillars of our product innovation. We are seeking a Security Engineer to support the security initiatives for our consumer electronics products. You will play a central role in product security, and have the ability to improve the product security program to meet higher level enterprise security objective. With new products launching every year, there is a constant need to ensure security in our on-the-go and in-the-home platforms. The ideal candidate has extensive secure software development experience in a fast-paced, agile product environment. Join our product security team to power the next wave of innovation at Bose.

Principal Duties and Responsibilities

• Architecting and designing products to guarantee secure practices, data confidentiality, system integrity
• Engineering and implementing ARM Trust Zone secure applets, implementing a cryptographic IOT device identity and root of trust
• Streamlining secrets, key management, cryptography, and credential management
• Defining Security requirements and conducting security assessments
• Architect and implement protections for intellectual property, including anti-reverse engineering, secure firmware distribution, and debug interface lockdown
• Ensure compliance with applicable security regulations and standards (e.g., EU CRA, ETSI EN 303 645, NIST) and support audits and certifications
• Advising engineering peers on security matters in the form of architectural guidance, code/design reviews, and solution development
• Improving vulnerability discovery, patching process, and leading responses to external security threats
• Code independently with minimal oversight and design system architecture with guidance
• Collaborating with cross-functional teams like product firmware, devops, cloud engineering, manufacturing, and program management
• Performing security testing on products and supporting with the security fix implementations
• Designing and maintaining private X.509 and JWK chains of trust used for validating authenticity of portable audio devices
• Stay up-to-date on security news, relevant technologies, plug into user groups, understand trends and security opportunities
• Be a stakeholder on interdisciplinary teams advocating for security

Qualifications

• 6 or more years of industry experience working in firmware development with a focus on security. An advanced degree can contribute towards experience
• Experience developing for embedded systems and Linux platforms in C, C++
• Strong knowledge of cryptographic theory and engineering including encryption, hashing, signing, digital certificates and hardware security modules (HSMs)
• Building internal security applications with cryptographic guarantees such as firmware encryption and signing, custom developer enablement tools, secure asset provisioning, etc.
• Experience aligning embedded product security practices with regulatory and compliance requirements (EU CRA, NIST, ISO 27001, IEC 62443 or similar frameworks)
• Experience implementing IP protection and anti-tamper mechanisms in embedded systems, including secure boot enforcement, firmware encryption, and hardware debug port protection
• Experience mitigating dependency or code-level defects including memory-management issues, input validation, timing attacks, broken authentication, side channels
• Experience with computer networking with a focus on security and IOT applications
• Bachelor's degree in Computer Science, or equivalent. A master’s degree is beneficial

Our compensation is thoughtfully tailored to your skills, experience, education, and location, and goes beyond base salary. The hiring range for this position in the primary work location of Framingham, Massachusetts is: $142,600-$196,000. The hiring range for other Bose work locations may vary. In addition to competitive base pay we offer rewards including bonus programs, comprehensive health and welfare benefits, a 401(k) plan, plus exclusive perks designed to support your wellbeing, and a generous employee discount where you can immerse yourself in our products and experiences.

At Bose, you're inspired to be and do your best and are rewarded for your unique talents! Our compensation is thoughtfully tailored to your skills, experience, education, and location, and goes beyond base salary.

We are a proudly independent company—driven by purpose, guided by our values, and united by a belief in the power of sound. As the world leader in audio experiences, we’re creating what’s next—pushing boundaries and delivering transformative sound experiences for people everywhere. Join us and make your next career move a mic-drop. Let’s Make Waves.