Description

You will lead security assessments across firmware, drivers, and system software.

Responsibilities

• Conduct security assessments including threat modeling, security testing, DAST, SAST, and SCA.
• Advise engineering teams on implementing Security Development Lifecycle (SDL) stages independently.
• Provide technical consultation on software security and SDL application.
• Refine software security best practices to continuously improve organizational approaches.
• Review and advise on various SDL stages to ensure mitigation analysis and secure design.

Required Skills

• 5+ years of experience in software security.
• Expertise in developing and reviewing software threat models.
• Deep experience in security concept design and mitigation analysis.
• Proven ability to write secure code and design secure software for low-level systems like drivers and firmware.
• Advanced secure code review skills in C and C++ for complex software projects.
• Proficiency in automation using Python.
• Experience performing Software Composition Analysis using tools like Black Duck.
• Demonstrated experience implementing a Security Development Lifecycle within an organization.
• Degree in any graduate field.

Preferred Skills

• Experience with Arm open source software or Arm assembly.
• Experience configuring SAST tools such as Coverity and SonarQube.
• Knowledge of security certification schemes (PSA Certified, Common Criteria, SESIP) or standards (ISO 21434, IEC 62443).
• Experience delivering software security training.

Key Skills

Education

Any Graduate