Job Title: Product Security Architect
Location: Fremont, CA
Duration: Long Term
Work Arrangement: Onsite 3 Days per Week, with Plans to Transition to 5 Days per Week
Pay Rate: $60–$70/hr
Note: This job doesn't offer any benefits.
Position Overview
We are seeking a senior Product Security Architect to lead product security across hardware, embedded systems, firmware, and cloud-connected energy products. The role focuses on security architecture, regulatory compliance, security testing, and vulnerability management.
Required Qualifications
Bachelor's or master's degree in Computer Science, Electrical Engineering, Computer Engineering, or a related field.
12+ years of experience in product security, embedded security, IoT security architecture, or hardware security engineering.
Deep expertise in ARM security architecture, TrustZone (TEE/OP-TEE), secure boot, chain-of-trust design, and hardware Root of Trust.
Hands-on experience with HSM, TPM, secure elements, cryptographic key management (AES-128/256, RSA, ECC), and hardware cryptographic accelerators.
Strong knowledge of TLS 1.2/1.3, mutual TLS, X.509 PKI, certificate lifecycle management, and secure communication protocols.
Production experience with secure OTA updates, firmware signing, encrypted delivery, A/B partitioning, anti-rollback, and fleet-scale deployment.
Experience with EU Cyber Resilience Act (CRA) and/or RED Delegated Act compliance, technical documentation, conformity assessments, and testing laboratories.
Experience managing PSIRT, CVSS scoring, CVE handling, coordinated disclosure, and remediation SLAs.
Experience managing third-party penetration testing and engaging with security researchers.
Proficiency in C/C++ for embedded systems, including ARM Cortex-A, Cortex-M, embedded Linux, RTOS, and 8051-class platforms.
Knowledge of compiler and binary hardening, including stack protectors, ASLR/PIE, RELRO, control-flow integrity, and static/dynamic analysis.
Experience leading threat modeling and translating findings into security architecture decisions.
Familiarity with IEC 62443, ETSI EN 303 645, EU CRA, and NIST SP 800-183.
Strong cross-functional collaboration skills across firmware, hardware, cloud, and product teams.
Preferred Qualifications
Experience securing PLC protocols, including HomePlug, G3-PLC, or proprietary PLC stacks.
Experience with CAN bus security, automotive-grade secure boot, or battery management system security.
Experience with secure manufacturing provisioning, device identity enrollment, and factory-line security.
Knowledge of side-channel analysis, fault injection, and hardware tamper-resistance techniques.
Experience with SBOM tools such as CycloneDX and SPDX, and firmware software composition analysis.
Familiarity with energy-sector security standards and regulations.
Experience securing solar inverters, battery energy storage systems, or grid-edge devices.
Team leadership or people-management experience.
Certifications such as CISSP-ISSAP, GICSP, OSCP, or CCSP.
Responsibilities
Architect secure boot chains across product hardware, including signed bootloaders, anti-rollback counters, eFuse/OTP provisioning, and verified boot.
Design ARM TrustZone isolation and hardware Root-of-Trust solutions using secure elements, PUF-based identity, and hardware cryptographic accelerators.
Audit JTAG/SWD debug interfaces and establish secure device identity and cryptographic key lifecycle management.
Strengthen PLC encryption and device-to-cloud authentication using mutual TLS, PKI, and hardware-backed key storage.
Design secure OTA update pipelines, firmware hardening, binary analysis, SBOM generation, and vulnerability scanning.
Lead CRA and RED Delegated Act compliance, technical documentation, certification programs, and coordination with testing laboratories.
Develop product security testing strategies covering static/dynamic analysis, fuzzing, protocol testing, and hardware-level testing.
Manage PSIRT processes, CVE tracking, remediation SLAs, coordinated disclosure, and fleet-wide patching.
Coordinate external penetration testing and security researcher engagements, ensuring findings are addressed through closure.
Lead threat modeling and security design reviews, particularly for safety-critical battery and system-controller products.
Secure PLC, CAN bus, BLE, Wi-Fi, and network interfaces across connected products.
Establish security architecture standards and collaborate with firmware, hardware, cloud, QA, and product teams.
Role Highlights
Ownership of product security architecture, testing, certification, and vulnerability management across a large deployed IoT energy portfolio.
Opportunity to influence global energy infrastructure security and regulatory compliance.
Direct engagement with security researchers and penetration-testing partners.
Collaboration with experts in embedded systems, power electronics, hardware, and cloud platforms.
Potential to grow into a team leadership role.