Sr. Product Security Incident Response Engineer

Advanced Micro Devices, Inc•Austin, TX

60d•Hybrid

About The Position

AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs. The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners, with a growing focus on AI infrastructure and AI workloads. To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response. You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels. You prioritize and balance multiple work streams on tight deadlines.

Requirements

A degree in Computer Science, Electrical and Computer Engineering, or related subjects

Nice To Haves

Demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, GPU, SOC, or hardware security-oriented definition.
Strong grasp of computer architecture, CPU and GPU/accelerator design, memory hierarchy and caches, and underlying hardware/firmware, including existing architectures (x86, ARM, and/or GPU/accelerator) and their security/virtualization extensions.
Experience securing AI/ML workloads and GPU/accelerator stacks (e.g., ROCm) and their security requirements at datacenter scale.
Familiarity with software/hardware interfaces and driver techniques.
Proficient in C/C++, Rust, and Python, with understanding of assembly instruction sets (AMD64 or ARM).
Experience designing and/or implementing secure systems—threat modeling, security architecture, protocol design, network security, and OS security.
Familiarity with PC Client / Data Center / IoT interconnect standards and protocols: PCIe, CXL, Ethernet, RDMA, SPI, I2C/I3C, and USB.
Quick to learn new concepts; strong teammate in cross-site, matrix environments.
Solid grasp of security principles—confidentiality, integrity, availability, authentication, authorization, and auditing—plus cryptographic algorithms.
Development experience with micro-kernels and/or real-time OSes.
Familiarity with OS and virtualization tech—especially Linux kernel/driver development, hypervisors/VMs, and containers; SaaS/PaaS/IaaS and Kubernetes a plus.
Demonstrated fluency with AI-assisted and agentic development tooling in real engineering work.

Responsibilities

Analyze security vulnerabilities and help define remediation strategies; assess, identify and communicate risks from security vulnerabilities to internal stakeholders, providing guidance regarding vulnerability response; communicate with customers and security researchers, and work cross-functionally with other internal stakeholder groups to drive resolution of security issues.
Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners.
Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products.
Develop and implement a threat intelligence program.
Provide recommendations for improving vulnerability management with an eye on automation, applying AI-assisted tooling to accelerate vulnerability triage, analysis, and response, and help establish how the team uses it.