Security Engineer - Trusted Execution Environment (TEE / ARM TrustZone)

We are looking for a security engineer to design and implement security-critical components running inside Trusted Execution Environments (TEE) such as ARM TrustZone.

In this role, you will develop Trusted Applications (TA) responsible for protecting DRM keys, secure media pipelines, device integrity verification, and hardware-backed security features for mobile and media platforms.

You will work closely with platform, operating system, and hardware teams to build robust security solutions protecting high-value digital content and platform services.

Responsibilities

• Design and implement Trusted Applications (TA) running in ARM TrustZone / TEE environments
• Develop secure communication between Normal World and Secure World
• Implement secure key management and cryptographic operations inside TEE
• Build DRM and secure media protection systems
• Integrate TEE security services with Android or embedded platforms
• Implement secure storage mechanisms (RPMB, secure file systems)
• Design device attestation and hardware-backed security features
• Perform threat modeling and attack surface analysis
• Collaborate with OS, firmware, and hardware teams to integrate platform security features
• Investigate and mitigate attacks such as
• Investigate and mitigate attacks such as tampering, reverse engineering, and runtime manipulation

• Strong programming experience in C/C++
• Experience developing software for Trusted Execution Environments (TEE) or ARM TrustZone
• Experience building Trusted Applications (TA) or secure platform services
• Knowledge of secure monitor calls (SMC) and world switching mechanisms
• Understanding of hardware root of trust, secure boot, and device attestation
• Experience with secure key storage and applied cryptography
• Experience working with Linux or embedded operating systems
• Bachelor’s degree or equivalent experience in Security Engineering, or related field.

Preferred Qualifications

• Experience with OP-TEE
• Experience implementing DRM or secure media pipelines
• Experience with secure storage (RPMB)
• Experience with Android hardware-backed security (Keystore / KeyMint)
• Familiarity with reverse engineering tools (Ghidra, IDA, Frida)
• Experience in platform security, console security, or embedded device security
• Knowledge of side-channel attacks and secure system design

Technologies We Use

• ARM TrustZone
• OP-TEE
• Secure Monitor Call (SMC)
• Secure Boot / Root of Trust
• RPMB secure storage
• C / C++
• Linux / Embedded systems
• Android platform security

At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.

Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.

In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more.

The estimated base pay range for this role is listed below.

$193,300-$289,900 USD

Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.

Sony Interactive Entertainment isn’t just the Best Place to Play - it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.