> Markdown version of [/jobs/ext/55461-security-engineer-trusted-execution-environment-tee-arm-trustzone](https://www.wearedevelopers.com/jobs/ext/55461-security-engineer-trusted-execution-environment-tee-arm-trustzone). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - Trusted Execution Environment (TEE / ARM TrustZone)

- **Company:** Sony Interactive Entertainment
- **Location:** San Mateo, CA, United States
- **Experience:** Expert
- **Salary:** $193,300.0 - $289,900.0
- **Contract:** Permanent contract
- **Skills:** Android Software Development, C++ (Programming Language), Computer Programming, Linux, Digital Content, File Systems, Embedded Operating Systems, Firmware, Key Management, Reverse Engineering, Software Engineering, Cloud Platform System, U-Boot
- **Published:** May 19, 2026
- **Apply:** https://www.dice.com/job-detail/bfc6d3ab-7300-4fda-a81c-0e209bff3d58

## About the Role

* Strong programming experience in C/C++
 * Experience developing software for Trusted Execution Environments (TEE) or ARM TrustZone
 * Experience building Trusted Applications (TA) or secure platform services
 * Knowledge of secure monitor calls (SMC) and world switching mechanisms
 * Understanding of hardware root of trust, secure boot, and device attestation
 * Experience with secure key storage and applied cryptography
 * Experience working with Linux or embedded operating systems
 * Bachelor's degree or equivalent experience in Security Engineering, or related field.

Preferred Qualifications

 * Experience with OP-TEE
 * Experience implementing DRM or secure media pipelines
 * Experience with secure storage (RPMB)
 * Experience with Android hardware-backed security (Keystore / KeyMint)
 * Familiarity with reverse engineering tools (Ghidra, IDA, Frida)
 * Experience in platform security, console security, or embedded device security
 * Knowledge of side-channel attacks and secure system design

Technologies We Use

 * ARM TrustZone
 * OP-TEE
 * Secure Monitor Call (SMC)
 * Secure Boot / Root of Trust
 * RPMB secure storage
 * C / C++
 * Linux / Embedded systems
 * Android platform security

## Description

We are looking for a security engineer to design and implement security-critical components running inside Trusted Execution Environments (TEE) such as ARM TrustZone.

In this role, you will develop Trusted Applications (TA) responsible for protecting DRM keys, secure media pipelines, device integrity verification, and hardware-backed security features for mobile and media platforms.

You will work closely with platform, operating system, and hardware teams to build robust security solutions protecting high-value digital content and platform services.

Responsibilities

 * Design and implement Trusted Applications (TA) running in ARM TrustZone / TEE environments
 * Develop secure communication between Normal World and Secure World
 * Implement secure key management and cryptographic operations inside TEE
 * Build DRM and secure media protection systems
 * Integrate TEE security services with Android or embedded platforms
 * Implement secure storage mechanisms (RPMB, secure file systems)
 * Design device attestation and hardware-backed security features
 * Perform threat modeling and attack surface analysis
 * Collaborate with OS, firmware, and hardware teams to integrate platform security features
 * Investigate and mitigate attacks such as
 + Investigate and mitigate attacks such as tampering, reverse engineering, and runtime manipulation


## Related Videos

- [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api)
- [A Hitchhikers Guide to Container Security - Automotive Edition 2024](https://www.wearedevelopers.com/videos/1119-a-hitchhikers-guide-to-container-security-automotive-edition-2024)
- [For the Cars and the Curious: Android Drift](https://www.wearedevelopers.com/videos/499-for-the-cars-and-the-curious-android-drift)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)