The Hardware/Firmware Product Security Engineer will be a member of the Product Security Assurance team specializing in security considerations for Client and Enterprise storage products (SSDs) that incorporate hardware and firmware components. This individual will provide crystal-clear technical direction and risk mitigation guidance for diverse engineering and business leaders at all levels. This person will also assist with evolving the Sandisk secure development practices to align with ever changing market, standard and regulatory requirements. During the product development process, this individual will advise the development team on secure development and evaluate the architecture with a security lens. The Product Security Engineer will lead security risk assessments, guide threat modeling activities, and participate in validation of security requirements at the component or system level. Our ideal teammate has experience architecting and developing hardware/firmware that meets the highest cybersecurity standards, is highly motivated and passionate about technology. This ideal candidate is eager to stay up to date with the latest industry trends and technologies and enjoys participating in industry consortiums. If this applies to you – join our collaborative team to develop together the next big thing in data!
Basic Qualifications (Required Skills & Experience)
Bachelor’s degree or greater with focus in Computer Science, Engineering, or relevant field from an accredited college/university
Design and engineering of security requirements and security controls for HW/FW (storage experience a plus!)
Knowledge of cybersecurity standards and best practices
Hardware & Firmware security architecture design and integration
Knowledge of low level hardware-software interactions, such as storage in flash, RAM or cache
Working understanding of security threats, security risk assessments, security threat modeling, security risk mitigation, and security incident reporting
Experience working with cryptographic protocols/libraries
Typical Minimum Experience Preferred (Desired Skills/Experience)
5-7 years of related experience preferred
3+ years of embedded hardware/software design and development
Familiar with FIPS 140
Experience with two or more of the following: real-time software development, vehicle electronics and controls, embedded systems design, application security, penetration testing, incident response
Experience with embedded software development is a plus
All your information will be kept confidential according to EEO guidelines.
