Senior Security Engineer (Research)

Job Overview:

We are looking for a motivated Senior Security Engineer with a solid computer security background and hands-on experience to join our architecture security team in Cambridge, UK.

This role empowers you to shape the state of art in security of various architecture specifications. It involves cooperating with highly motivated architects, researchers and engineers from Arm. You will need a good eye for detail to perform security analysis and identify, analyze and mitigate security risks in architecture specifications, as well good interpersonal skills for cross site collaborations. You will also be performing vulnerability research and develop security validation collateral. Ensuring timely delivery of the security collaterals in an evolving environment is a challenge which will stretch and extend your knowledge and abilities. You will have an impact in improving the quality of the work from this group which will contribute to partner success by improving their time to market. If you strive for continuous improvement and are a hands-on team member this position would be of interest to you.

Responsibilities:

• Conduct comprehensive threat modelling, vulnerability analysis, and security risk assessments of Arm architecture specifications spanning CPU, Software, and System architectures.
• Collaborate with architecture development, implementation, and vulnerability research teams to enhance security posture of architecture specifications.
• Stay up to date with the latest security threats, trends, and mitigation strategies.
• Develop and maintain documentation related to security risk analysis.
• Develop and influence security validation test plans for hardware and firmware specifications.
• Investigate new security vulnerabilities on Arm IPs through PoC/exploit writing at different stages: architecture specification, RTL design, and silicon
• Effective interpersonal skills, in terms of planning, reviews, status updates and meetings, as well as delivery against expectation.

Required Skills and Experience:

• Strong understanding of security principles, threat modelling, vulnerability analysis, and security risk assessment.

• Demonstrated ability in computer security – Security risk analysis of hardware/software architecture/implementations, played CTFs, published research and talks, exploits, PoCs, etc.
• Knowledge of computer architecture (preferably Arm) and OS fundamentals
• Familiarity with programming languages such as Python, C/C++, and assembly.
• Self-motivated and proactive demeanour towards challenges and problem solving
• Excellent communication and collaboration skills

“Nice To Have” Skills and Experience:

• Understanding of micro-architectural attacks and side-channels
• Reverse engineering skills
• Experience with bus protocols (AMBA, CXL, PCIe, etc.)
  

In Return: