Senior Security Software Engineer

Openchip And Software Technologies SL
Barcelona, Spain
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Barcelona, Spain

Tech stack

Advanced Configuration and Power Interface (ACPI)
Artificial Intelligence
Assembly Language
JIRA
Booting (BIOS)
Cloud Computing
Code Review
Continuous Integration
Software Debugging
Software Design Documents
Device Drivers
Middleware
Firmware
Joint Test Action (IEEE Standards)
Kernel-Based Virtual Machine
Linux kernel
Open Source Technology
OpenSSL
Public Key Infrastructure
Quick EMUlator (QEMU)
Reduced Instruction Set Computing
Security Software
Systems Integration
Xen Servers
Data Processing
Transport Layer Security
Extensible Firmware Interface
GIT
Operational Systems
U-Boot
Software Version Control
Programming Languages

Job description

Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Security Software Engineer, you will lead a team designing and implementing security features across Openchip's software stack: from low-level platform firmware to integrations with AI and Cloud runtimes. You will also contribute to hardware/software co-design, providing requirements and identifying potential IPs, as well as engage with the wider security community., * Make independent technical contributions to help their team deliver its commitments. In particular:

  • Develop and maintain security features for novel and existing hardware architectures (RISC-V and others).
  • Implement secure boot, confidential computing, cryptography, and other platform security features.
  • Define new interfaces and modify existing ones to expose security features to user applications. When possible, identify and leverage existing standard ones.
  • Interact with colleagues across projects to unblock issues, or to reach consensus on technical topics. In particular:
  • Work with firmware and operating systems teams, incorporating security features into low-level and platform software.
  • Work with middleware teams, exposing security features to user applications and/or hardening frame-works.
  • Work with hardware teams, providing requirements for security and influencing hardware/software co-design.
  • Collaborate with colleagues through code reviews, bug triaging, design documents,. . .
  • Contribute to shared team responsibilities (CI failure triaging, documentation, code fixits, rota-tions. . . ).

Requirements

  • Bachelor or Master's degree in a relevant field.
  • Experience in the relevant field (+7 years).
  • Solid knowledge about computer architecture (CPU, cache and memory hierarchy, buses,. . . ).
  • Knowledge about at least two of the following areas:
  • Confidential computing technologies (RISC-V CoVE, Intel SGX, Intel TDX, AMD SEV, confidential containers).

  • Platform security features (kernel/firmware hardening, CHERI, CFI, pointer tagging, virtualization-based security, IOMMU).

  • Cryptograpy usage across networks (certificates, signatures, TLS/SSL, PKI remote attestation).

  • Boot integrity technologies (UEFI Secure Boot, measured boot, TPM).

  • Cryptography, including experience with cryptography libraries (OpenSSL, libssl, wolfssl, mbedtls. libsodium).

  • Good understanding of pre-boot and boot process, and Linux kernel internals.
  • Solid knowledge of low-level development languages (C, Rust).
  • Experience with standard tools for source control (git), continuous integration, task management (Jira).

Preferred qualifications

  • Experience with assembly language (of any architecture).
  • Experience with kernel and/or device driver development.
  • Experience with hypervisor technology (KVM, Xen, Qemu).
  • Experience with system boot technology (UEFI/EDK2, ACPI, u-boot, devicetree).
  • Experience with open source software development. In particular, engagement with OpenSSF or other Open Source security organizations, and/or history of contributions to Open Source projects.
  • Understanding of lifecycle management on firmware.
  • Knowledge of JTAG debugging (including key generation and management).
  • Experience working with hardware cryptography IPs.

Soft skills:

  • Team player: communicative and collaborative person who focuses on the outcome of the team above the ndividual needs.
  • Curious about learning new technologies/stacks.
  • Capable of within- and cross-team collaboration at the technical level.
  • Can-do attitude, proactive and willing to step up and resolve any obstacle. Self-aware, self-starter, and self-motivated.

Benefits & conditions

  • Competitive compensation packages with opportunities for growth and professional development.

We are looking for outstanding people willing to join our mission to change this industry and help to build a better world.

If you feel identified with Openchip, please contact us. We can offer a competitive compensation package in a flexible work schema that will help you to keep a balance between your personal and professional life.

About the company

At Openchip, we are pioneers in the semiconductor industry, driving innovation that transforms industries and shapes the future of computing. As a key member of our leadership team, you will have the opportunity to work on groundbreaking technologies that power some of the most demanding applications in AI, HPC, and cloud computing. We offer: * Join a collaborative and inclusive culture that values creativity and technical excellence. * The chance to work on impactful projects that make a real difference in the world., At Openchip & Software Technologies S.L., we believe a diverse and inclusive team is the key to groundbreaking ideas. We foster a work environment where everyone feels valued, respected, and empowered to reach their full potential - regardless of race, gender, ethnicity, sexual orientation, or gender identity.

Apply for this position