CPU Security Architect

Qualcomm•Santa Clara, CA

4d•$243,200 - $364,800

About The Position

As a CPU Security Architect, you will play a pivotal role in shaping the security foundations of next-generation CPUs, CPU clusters, and associated control processors. Your responsibilities will include defining and evaluating access-control architectures, privilege models, isolation boundaries, authorization flows, and protection mechanisms across CPU subsystems, control processors, firmware interfaces, debug resources, shared memory, and broader SoC resources. We seek an individual with deep expertise in system-level security, hardware architecture, access-control policy design, and secure integration across complex SoC environments, with the ability to ensure robust protection against emerging threats. In this role, you will actively collaborate with SoC architects and product teams across multiple product lines to optimize overall Power, Performance, and Area (PPA) efficiency while delivering the highest security assurance tailored for our target markets.

Requirements

Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or related field and 8+ years of Hardware Engineering, Software Engineering, Electrical Engineering, Systems Engineering, or related work experience.
Master's degree in Electrical Engineering, Computer Engineering, Computer Science, or related field and 7+ years of Hardware Engineering, Software Engineering, Electrical Engineering, Systems Engineering, or related work experience.
PhD in Electrical Engineering, Computer Engineering, Computer Science, or related field and 6+ years of Hardware Engineering, Software Engineering, Electrical Engineering, Systems Engineering, or related work experience.

Nice To Haves

Master's degree in Electrical Engineering, Computer Science, or related field and 7+ years of systems security or related work experience.
Proven experience in system security architecture
Deep understanding of micro-architectural security attacks and countermeasures
Strong understanding of access-control architectures for CPU clusters, control processors, privileged agents, debug resources, shared memory, and security-sensitive control paths
Strong understanding and experience in at least one CPU ISA like ARM, x86, Risc-V
Experience with performing threat modeling, security risk analysis, or security architecture
Good understanding of cryptographic algorithms and protocols
Strong analytical, problem-solving and communication skills
PhD degree in systems security; 5+ years of proven practical experience
Experience in CPU microarchitectural security threats of various core units
Experience in countermeasures for microarchitectural attacks
Hands on HW design experience for CPU sub-components
Experience in formal or semi-formal security verification methods or automated microarchitectural fuzzing
Experience defining or verifying access-control policies for CPU cluster management, control processors, firmware interfaces, debug authentication, memory protection, or interconnect-level authorization

Responsibilities

Design and implement new CPU security features and functions to counteract potential threats
Architect access-control topologies and policies for CPU clusters and control processors, including privilege separation, authorization checks, isolation boundaries, secure boot and debug access policies, and protection of security-critical registers, memories, and control flows
Collaborate with HW and SW engineering teams to ensure secure design principles are properly implemented.
Deliver security architecture specifications to broader teams and define requirements for subsystem architects, including access-control requirements for CPU clusters, control processors, firmware interfaces, and shared SoC resources.
Conduct regular security assessments and recommend changes as necessary.
Stay updated on the latest industry trends, threats, and vulnerabilities to keep security systems up-to-date.