Product Security Engineer

Job Description
Our partner is looking for a Product Security Engineer, Hardware to strengthen the security of processor and SoC platforms through architecture analysis, attack research and practical security testing.
The role focuses on identifying weaknesses in processor hardware, Root of Trust, firmware and SoC designs, then turning known and emerging attack techniques into concrete tests and mitigation recommendations.
You will work closely with hardware teams and contribute to security documentation, regulatory readiness and product security improvements.

Location:
Barcelona, Spain, Hybrid Level: Mid Responsibilities Analyse processor, SoC, Root of Trust and firmware security Review hardware architecture and implementation for vulnerabilities Maintain hardware security specifications and technical documentation Research new hardware and platform attack techniques Reproduce published attacks against real implementations Develop new security tests and attack scenarios Identify microarchitectural, physical and memory related weaknesses Build proof of concept attacks using C and assembly Report vulnerabilities clearly and recommend mitigations Work with hardware teams to validate and resolve findings Support security certification and regulatory compliance activities Automate security testing and data analysis where relevant Requirements 2 to 5 years of hardware security, computer architecture or systems security experience Master's degree in a relevant technical field Strong understanding of RISC V architecture Processor microarchitecture and SoC knowledge Knowledge of hardware attack techniques Microarchitectural attack knowledge Physical and memory attack awareness C programming experience Assembly knowledge, ideally RISC V Ability to create security tests and attack proofs of concept Strong technical documentation skills Ability to work independently and with engineering teams Optional / Desired Caliptra or OpenTitan Side channel analysis Fault injection Hardware security research or CTF experience Classical cryptography Post Quantum Cryptography Confidential computing Trusted execution environments Remote attestation Memory isolation EU CRA Common Criteria FIPS * Python for test automation and analysis What's in it for you?
Flexible

working hours
Hybrid model, 4 days office, 1 day from home 1 week per year working from anywhere 25 days annual leave plus December 24 and 31 Monthly food allowance Private medical insurance Relocation bonus Housing search support Visa support if required Family relocation support Virtual shares Language classes Tax incentive, subject to eligibility