Senior Product Security Engineer

Salary: £45,000 - 80,000 per year

Requirements:

• We require proven experience securing hardware-firmware interfaces or embedded systems.
• We require strong hands-on expertise in C/C++ security code reviews.
• We require background in secure boot, key provisioning, firmware hardening, and trusted computing.
• We require a solid understanding of firmware attack surfaces, including fault injection, code injection, and privilege escalation.
• We require familiarity with isolation technologies such as Arm TrustZone, secure monitor, or memory protection.
• We require the ability to run and interpret quick tests to verify security assumptions.
• We require experience with advanced attack surfaces such as side-channel or fault attacks.
• We require excellent collaboration, communication, and documentation skills.
• Nice to have: familiarity with hardware design flows such as RTL, UVM, or SystemVerilog.
• Nice to have: exposure to TPMs, Secure Elements, or hardware-backed crypto modules.
• Nice to have: background in academic research or industry work in embedded security, firmware, or cryptographic implementation.
• Nice to have: experience discovering or analysing security vulnerabilities in products, ideally with public CVEs or equivalent internal findings.
• Nice to have: hands-on experience evaluating or testing products against certification schemes such as SESIP, PSA Certified, or Common Criteria.

Responsibilities:

• We review firmware and SoC architecture for security risks and threat models.
• We evaluate critical security features like secure boot, rollback protection, memory isolation, and TEE.
• We perform C/C++ security code reviews to spot implementation-level flaws.
• We conduct targeted hands-on tests to validate security concerns when needed.
• We collaborate with cross-functional teams to embed security into the development lifecycle.
• We help shape secure firmware architectures for key handling, update flows, and hardware-backed protections.
• We communicate risks and solutions clearly to both technical and non-technical audiences.
• We develop the roadmap for our core interconnect and control subsystems, ensuring they are strategically aligned and technically validated across markets.
• We work across lines of business and customers to ensure these foundational technologies are robust, driven, and reusable across our product portfolio.
• We own requirement specs and roadmap rigor to ensure subsystem coherence across product generations.

Technologies:

• ARM
• Embedded
• Firmware
• Hardware
• Support
• Security
• SystemVerilog
• AI

More:

We are Arm, an equal opportunity employer with a hybrid working approach centered around flexibility. Our teams split time between the office and other locations, with specific arrangements shared during application. We value a 10x mindset built on curiosity, ambition, collaboration, and creating impact used by millions. We also provide recruitment accommodations and support throughout the hiring process, including accessibility assistance and interview adjustments where needed.

last updated 35 week of 2026