Senior Software Engineer, Device Security
About The Position
As a Senior Software Engineer specializing in Device Security at HP IQ, you will help advance the security of AI devices and empower businesses and users to control their privacy and personal data. You will own projects through their full life cycle, from threat modeling and secure architecture design through implementation. The role involves designing and implementing solutions across embedded systems, PCs, and server-class workstations, including how devices interface with the outside world while maintaining a positive user experience and protecting privacy and security. You will develop security technologies that maintain and strengthen customer trust, working across the software stack and collaborating with teams including CoreOS, Firmware, Design, and Cloud Services. The role also contributes to vulnerability management and secure software development practices across the company.
Requirements
- At least 6 years of experience in secure programming in embedded systems, AOSP, or Windows environments, primarily using C, C++, or Java.
- Strong understanding of embedded systems security concepts, such as roots of trust, secure boot, cryptography, PKI, or application sandboxing.
- Experience in firmware security, OS-level security, or network security.
- Demonstrated ability to architect and lead multidisciplinary projects from concept to deployment.
- Experience designing secure interfaces with biometric sensors, custom PKI handling, or factory flow processes.
- Ability to work closely with cross-functional teams to assess attack surfaces and threat models.
- Deep understanding of, or a deep desire to learn, cryptography, security, and privacy theory and practices.
Nice To Haves
- Background in embedded systems such as consumer electronics, IoT, medical, or payment devices or systems.
- Experience with AOSP and Linux security, including TrustZone, TEE, AVB, Keystore, and SELinux.
- Experience with privacy compliance standards such as GDPR, CCPA, HIPAA, or ISO.
Responsibilities
- Lead the design and implementation of embedded device security architecture, including secure key management, hardware secure boot, PKI, and data encryption.
- Collaborate with CoreOS, Firmware, Design, and Cloud Services teams to create security features.
- Develop custom TrustZone or native kernel applications for hardware-backed identity and data protection.
- Contribute to projects involving secure device-to-device channels, personal-data protection, and automatic theft detection.
- Interface with biometric sensors to secure data flows within and across device boundaries.
- Assist with vulnerability management and apply secure SDLC practices.
- Own projects from threat modeling and architecture design through implementation and deployment.
- Assess attack surfaces and threat models across features with cross-functional teams.
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Long-term and short-term disability insurance
- Employee assistance program
- Flexible spending account
- Life insurance
- 4–12 weeks of fully paid parental leave based on tenure
- 11 paid holidays
- Additional flexible paid vacation and sick leave
- Flexible work environment
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
