Product Security Architect

Role : Product Security Architect

Location: Fremont, CA (Hybrid)

Duration: Contract

Summary

The role drives secure boot architecture, ARM TrustZone partitioning, cryptographic key lifecycle management, and mutual-TLS/PKI infrastructure at fleet scale. The architect leads EU Cyber Resilience Act and RED Delegated Act compliance, manages the PSIRT/vulnerability program, and serves as the primary technical liaison for third-party penetration testers and independent security researchers.

Required Skills

• Embedded & IoT Security: ARM TrustZone (Cortex-A TEE/OP-TEE, TrustZone-M), Secure Boot, Hardware Root of Trust, Secure Element, PUF
• Hardware Security Modules: HSM, TPM integration and cryptographic key management (AES-128/256, RSA, ECC P-256/P-384)
• PKI & Transport Security: X.509 PKI, Mutual TLS, TLS 1.2/1.3, Certificate Lifecycle Management
• OTA & Firmware Security: Firmware Signing, A/B Partitioning, Anti-Rollback, Secure OTA Pipelines
• Compiler Hardening: Stack Canaries, ASLR, PIE, RELRO, FORTIFY_SOURCE, CFI
• Regulatory Frameworks: EU Cyber Resilience Act, RED Delegated Act, IEC 62443, ETSI EN 303 645, NIST SP 800-183
• Vulnerability Management: CVSS, CVE, PSIRT, Coordinated Disclosure, Penetration Testing
• Threat Modeling: STRIDE, PASTA
• Programming & Tooling: C, C++, Embedded Linux, RTOS, CMake, Clang
• Protocols & Interfaces: BLE, Wi-Fi, CAN Bus, HomePlug, G3-PLC, JTAG, SWD
• SBOM: CycloneDX, SPDX