Senior firmware security engineer

Job highlights

• 8+ years of experience in firmware,BIOS,embedded software,or platform security
• Required Qualifications
• Preferred Qualifications
• Experience analyzing CVEs,CVSS scoring,attack vectors,and security vulnerabilities
• Experience using AI-assisted security assessment frameworks and security automation pipelines

Role Summary
We are seeking a highly motivated firmware security engineer to drive security vulnerability identification, triage, and remediation across AMDs Platform Security Processor (PSP) firmware stack. The role focuses on leveraging AI-assisted security analysis tools such as Mythos, performing threat-model-based vulnerability assessment, validating findings, reducing false positives, and partnering with firmware teams to improve the overall security posture of PSP, Secure OS, Boot ROM, and related trusted execution environments.

Perform security analysis of PSP firmware, Secure OS (AMD-TEE), boot firmware, and trusted execution environments using Mythos and other SAST/security tools

Review and triage AI-generated security findings, distinguish genuine vulnerabilities from false positives, and drive root-cause analysis.

• Develop and apply threat models, trust boundaries, attack surfaces, and threat classifications for firmware components.
• Analyze source code, binaries, firmware images, and boot flows to identify potential security weaknesses.
• Collaborate with PSP, BIOS, PMFW, Security Architecture, and Product Security teams to drive timely remediation.
• Validate remediation effectiveness through security reviews and regression analysis.
• Create security dashboards and metrics covering:
  o Critical/High vulnerability trends
  o False-positive rates
  o Remediation closure rates
  o Severity distribution
  o Component-wise risk assessment
• Define secure coding recommendations and firmware hardening guidelines.
• Automate security triage, reporting, and remediation workflows where applicable.
• Support security audits, PSO reviews, and product release readiness activities.

Required Qualifications

• BS/MS in Computer Engineering, Computer Science, Cybersecurity, or related field.
• 8+ years of experience in firmware, BIOS, embedded software, or platform security.
• Strong expertise in C/C++ and low-level firmware development.
• Deep understanding of:
  o Secure Boot
  o Root of Trust
  o Trusted Execution Environments
  o Cryptography fundamentals
  o Firmware security architectures
• Experience with static analysis and security assessment tools (Coverity, Code QL, Mythos, Fortify, etc.).
• Experience analyzing CVEs, CVSS scoring, attack vectors, and security vulnerabilities.
• Strong debugging skills across firmware and platform stacks.

Preferred Qualifications

• Experience with AMD PSP, AMD Secure Processor, Secure OS, TEE, AGESA, or Boot ROM technologies.
• Knowledge of binary analysis tools such as Ghidra, IDA Pro, Binja, or similar.
• Familiarity with threat modelling methodologies (STRIDE, MITRE ATT&CK, CWE, CAPEC).
• Experience using AI-assisted security assessment frameworks and security automation pipelines.
• Experience with Jira-based vulnerability tracking and security compliance processes.

Success Metrics

• Reduction in Mythos false-positive backlog.
• Improved PSP firmware security coverage.
• Faster security issue triage and closure.
• Improved Critical/High vulnerability remediation timelines.
• Increased automation of security analysis workflows.
• Enhanced firmware threat-model quality and consistency.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.