Senior Product Security Engineer
Overview
Bose is seeking a Product Security Engineer to support security initiatives for consumer electronics products, architecting secure embedded systems with ARM TrustZone and cryptographic firmware protections.
Responsibilities
- Architect and design products to guarantee secure practices, data confidentiality, and system integrity
- Engineering and implementing ARM TrustZone secure applets and cryptographic IoT device identity and root of trust
- Streamline secrets, key management, cryptography, and credential management
- Define security requirements and conduct security assessments
- Architect and implement IP protections including anti-reverse engineering, secure firmware distribution, and debug interface lockdown
- Ensure compliance with security regulations and standards (EU CRA, ETSI EN 303 645, NIST)
- Advise engineering peers through architectural guidance, code reviews, and design reviews
- Improve vulnerability discovery, patching processes, and lead responses to external security threats
- Code independently with minimal oversight and contribute to system architecture
- Collaborate with cross-functional teams including product firmware, DevOps, cloud engineering, and manufacturing
- Perform security testing on products and support security fix implementation
- Design and maintain private X.509 and JWK chains of trust
- Stay current on security news, technologies, trends, and opportunities
- Advocate for security as a stakeholder on interdisciplinary teams
Requirements
- Experience developing for embedded systems and Linux platforms in C and C++
- Strong knowledge of cryptographic theory including encryption, hashing, signing, digital certificates, and hardware security modules (HSMs)
- Building internal security applications with firmware encryption and signing, custom developer tools, and secure asset provisioning
- Experience aligning embedded product security with regulatory and compliance requirements (EU CRA, NIST, ISO 27001, IEC 62443)
- Experience implementing IP protection and anti-tamper mechanisms including secure boot, firmware encryption, and hardware debug port protection
- Experience mitigating code-level defects including memory management, input validation, timing attacks, and side channels
- Experience with computer networking focused on security and IoT applications
- Bachelor’s degree in Computer Science or equivalent
- 6 or more years of industry experience in firmware development with a focus on security
Sourced from the employer’s career site. Verify before applying.
Variables & Compensation
- Bonus programs
- Comprehensive health and welfare benefits
- 401(k) plan
- Employee discount
Trademark Disclaimer: Unless explicitly designated as a direct or sponsored listing, EmbeddedDOESHire is not affiliated with, endorsed by, or associated with Bose Corporation. All company logos, trademarks, and brand parameters are the property of their respective owners and are utilized here solely for indexical and identification purposes.
Compensation Disclaimer: Unless this specification was directly verified and posted by the employer, we cannot guarantee the accuracy of the listed salary parameters. These figures are compiled from public market records and may deviate from actual offered compensation. Final salaries are determined dynamically by the hiring entity based on candidate evaluation, location, and final contract execution.
Content Disclaimer: This listing is sourced from the employer's public career site. Job details — including responsibilities, qualifications, and compensation — may change. Verify with the employer before applying.