Senior Security Software Engineer
Role details
Job location
Tech stack
Job description
Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Security Software Engineer, you will lead a team designing and implementing security features across Openchip's software stack: from low-level platform firmware to integrations with AI and Cloud runtimes. You will also contribute to hardware/software co-design, providing requirements and identifying potential IPs, as well as engage with the wider security community., * Make independent technical contributions to help their team deliver its commitments. In particular:
- Develop and maintain security features for novel and existing hardware architectures (RISC-V and others).
- Implement secure boot, confidential computing, cryptography, and other platform security features.
- Define new interfaces and modify existing ones to expose security features to user applications. When possible, identify and leverage existing standard ones.
- Interact with colleagues across projects to unblock issues, or to reach consensus on technical topics. In particular:
- Work with firmware and operating systems teams, incorporating security features into low-level and platform software.
- Work with middleware teams, exposing security features to user applications and/or hardening frame-works.
- Work with hardware teams, providing requirements for security and influencing hardware/software co-design.
- Collaborate with colleagues through code reviews, bug triaging, design documents,. . .
- Contribute to shared team responsibilities (CI failure triaging, documentation, code fixits, rota-tions. . . ).
Requirements
- Bachelor or Master's degree in a relevant field.
- Experience in the relevant field (+7 years).
- Solid knowledge about computer architecture (CPU, cache and memory hierarchy, buses,. . . ).
- Knowledge about at least two of the following areas:
-
Confidential computing technologies (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, confidential containers).
-
Platform security features (kernel/firmware hardening, CHERI, CFI, pointer tagging, virtualization-based security, IOMMU).
-
Cryptograpy usage across networks (certificates, signatures, TLS/SSL, PKI remote attestation).
-
Boot integrity technologies (UEFI Secure Boot, measured boot, TPM).
-
Cryptography, including experience with cryptography libraries (OpenSSL, libssl, wolfssl, mbedtls. libsodium).
- Good understanding of pre-boot and boot process, and Linux kernel internals.
- Solid knowledge of low-level development languages (C, Rust).
- Experience with standard tools for source control (git), continuous integration, task management (Jira).
Preferred qualifications
- Experience with assembly language (of any architecture).
- Experience with kernel and/or device driver development.
- Experience with hypervisor technology (KVM, Xen, Qemu).
- Experience with system boot technology (UEFI/EDK2, ACPI, u-boot, devicetree).
- Experience with open source software development. In particular, engagement with OpenSSF or other Open Source security organizations, and/or history of contributions to Open Source projects.
- Understanding of lifecycle management on firmware.
- Knowledge of JTAG debugging (including key generation and management).
- Experience working with hardware cryptography IPs.
Soft skills:
- Team player: communicative and collaborative person who focuses on the outcome of the team above the ndividual needs.
- Curious about learning new technologies/stacks.
- Capable of within- and cross-team collaboration at the technical level.
- Can-do attitude, proactive and willing to step up and resolve any obstacle. Self-aware, self-starter, and self-motivated.
Benefits & conditions
- Competitive compensation packages with opportunities for growth and professional development.
We are looking for outstanding people willing to join our mission to change this industry and help to build a better world.
If you feel identified with Openchip, please contact us. We can offer a competitive compensation package in a flexible work schema that will help you to keep a balance between your personal and professional life.