Senior Software Engineer, Security

Sonos•Boston, MA

1d•Hybrid

About The Position

The CoreSW-Security team is responsible for securing Sonos products throughout their life, from the hardware level to the application layer; our charter spans everything from SoC-level secure boot, to kernel and userspace security software, to product manufacturing, to software supply chain and beyond. Our mission is to ensure that the simplicity and delight our customers expect from Sonos products never comes at the cost of their security or privacy. We proactively address security problems, risks, and threats, and our work has a direct impact on every product Sonos ships. As an engineer on the CoreSW-Security team, you'll operate across a uniquely broad scope, owning meaningful workstreams end-to-end on a small, high-trust team.

Requirements

Bachelor’s in Computer Engineering, Electrical Engineering, Computer Science or related field
At least 5 to 8 years of professional experience developing software in C and C++ for embedded systems
Demonstrated hands-on experience with embedded systems security on Linux-based systems, including bootloader, kernel-, and userspace security
Strong written and verbal communication skills
Qualified applicants must be able to work from the office a minimum of 3 days per week

Nice To Haves

Experience with security architecture and design, including platform hardening
Knowledge of cryptographic algorithms and systems
Knowledge of Yocto Project / OpenEmbedded workflows
Familiarity with the use of AI tools for code and vulnerability scanning
Familiarity with security research, including ethical hacking or penetration testing
Familiarity with cybersecurity regulations, such as CRA

Responsibilities

Own security-relevant workstreams end-to-end, everything from design, to implementation, to long term maintenance in fielded devices
Collaborate across the organization in order to balance security and usability concerns
Contribute to security design reviews across Sonos’ portfolio of devices and software features
Triage and resolve vulnerability reports directly from security researchers and from the cybersecurity industry

Benefits

Medical, Dental, and Vision Insurance
A 401(k) plan with company matching and immediate vesting
An Open Time Off policy (OTO)
80 hours of sick time upon hire, refreshed annually
Up to 12 paid holidays per calendar year
A generous paid leave program for new parents or to care for a family member with a serious health condition
short- and long-term disability for your own medical condition
Company-paid Disability, Life, and AD&D Insurance
Voluntary benefits, including Voluntary Life, AD&D, Accident, and Pet Insurance
Mental health benefits to support your holistic well-being
A generous employee discount program
Sonos Radio HD - on us!