Staff Firmware Engineer - Security

We are seeking a highly skilled Security Software Engineer with expertise in Trusted Platform Modules (TPM), Firmware Attestation, and Root of Trust (RoT). The ideal candidate will have hands-on experience with TPM firmware and protocols and will be responsible for designing, implementing, and maintaining robust security solutions to protect hardware, firmware, and software integrity.

Key Responsibilities:

• Develop, integrate, and maintain security solutions focused on TPM, firmware attestation, and Root of Trust (RoT).

• Implement and optimize TPM firmware and protocols to ensure robust device security.

• Conduct threat modeling, risk assessments, and vulnerability analysis on firmware security components.

• Work closely with hardware and firmware teams to ensure secure lifecycle management of embedded devices.

• Develop secure firmware update mechanisms with integrity verification.

• Automate security validation and compliance testing for TPM and firmware security features.

• Stay updated on industry security standards and protocols (e.g., TCG, NIST, FIPS, ISO 27001) and implement best practices.

• Bachelor s or Master s degree in Computer Science.

• 10+ years of experience in security software development with a focus on firmware and hardware security.

• Hands-on experience with TPM firmware and protocols (TPM 2.0).

• Proficiency in C, for low-level security software development.

• Strong understanding of cryptographic algorithms, secure key management, and hardware-backed security.

• Familiarity with UEFI/BIOS security, secure enclave technologies, and embedded security solutions.

• Knowledge of security vulnerabilities, mitigations, and industry best practices.

• Experience working with open-source TPM stacks is a plus.