Senior Threat-Driven Product Security Architect

Sandisk; Milpitas (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Sandisk seeks a seasoned Product Security Assurance Architect to strengthen security across firmware-driven products and storage platforms. You will perform independent technical security assessments, exploitability analyses, and adversarial security reviews, collaborating with Platform Security, firmware, ASIC, validation, PSIRT, and product teams to reduce risk across the portfolio.

The role focuses on security lifecycle maturity, threat modeling, and scalable assurance methodologies, aligning

Qualifications

• Bachelor's, Master's, or PhD in Computer Science, Electrical Engineering, Cybersecurity, or related field.
• 10+ years of experience in firmware security, embedded systems security, product security, or related disciplines.
• Strong expertise in firmware and embedded security concepts (secure boot, roots of trust, authN/authZ, firmware update security, cryptographic protections, debug/mfg security).
• Strong understanding of attacker techniques, threat modeling, and adversarial thinking applied to embedded systems.
• Excellent written and verbal communication skills with engineering teams, vendors, product leadership, and executives.

Responsibilities

• Conduct independent technical security assessments of firmware-driven products and embedded platforms to identify gaps and residual risk.
• Assess effectiveness of security controls, architecture decisions, and exploitability.
• Evaluate threat models and perform attacker-informed analysis.
• Evaluate trust boundaries, secure boot, update paths, debug interfaces, and lifecycle security.
• Partner with engineering teams to recommend practical mitigations and improvements across the product portfolio.
• Advance SDL effectiveness across product teams by assessing security rigor and evidence readiness.

Skills

Firmware security

Embedded systems security

Threat modeling

Exploitability analysis

Adversarial thinking

Security assurance

SDL / secure development lifecycle

Communication skills

Security architecture

Problem solving

Education

Bachelor's/Master's/PhD in CS/EE/Cybersecurity

Tools

SAST tools

Fuzzing tools

Job description

Sandisk seeks a seasoned Product Security Assurance Architect to strengthen security across firmware-driven products and storage platforms. You will perform independent technical security assessments, exploitability analyses, and adversarial security reviews, collaborating with Platform Security, firmware, ASIC, validation, PSIRT, and product teams to reduce risk across the portfolio.

The role focuses on security lifecycle maturity, threat modeling, and scalable assurance methodologies, aligning