Staff Engineer, Platform Security Systems Software

Tenstorrent

62d • $100,000 - $500,000

About The Position

Tenstorrent is leading the industry on cutting-edge AI technology, revolutionizing performance expectations, ease of use, and cost efficiency. With AI redefining the computing paradigm, solutions must evolve to unify innovations in software models, compilers, platforms, networking, and semiconductors. Our diverse team of technologists have developed a high performance RISC-V CPU from scratch, and share a passion for AI and a deep desire to build the best AI platform possible. We value collaboration, curiosity, and a commitment to solving hard problems. We are growing our team and looking for contributors of all seniorities. As a Staff Platform Security Software Engineer, you'll focus on developing and securing the lowest software layers that protect and power our AI/ML and general compute devices. Working closely with the hardware architecture team, you'll enable a hardware-backed Root of Trust to provide security features via ROM, firmware, and software code development. You'll also design and build the security infrastructure that supports the device across its entire lifecycle from provisioning through customer deployment. This role is remote, based out of the United States. We welcome candidates at various experience levels for this role. During the interview process, candidates will be assessed for the appropriate level, and offers will align with that level, which may differ from the one in this posting.

Requirements

• 8+ years delivering production security software, including 4+ years focused on embedded systems, silicon devices, and firmware development.
• Strong coding skills in C, C++, or Rust plus Go or Python.
• Deep expertise in secure boot, code-signing, and firmware update mechanisms.
• Proven experience developing and testing bootloaders like U-Boot or Coreboot.
• Working knowledge of cryptographic primitives, public key infrastructure, device attestation, and secure computing architectures.
• Skilled in RTOS development and integration using platforms like TockOS, Zephyr, or similar real-time systems.
• Experience conducting security assessments and risk analysis for firmware and embedded systems.
• Excellent communication skills for translating complex hardware security concepts to cross-functional teams.
• RISC-V architecture knowledge is a significant plus.
• Working knowledge of TEE and confidential computing solutions in embedded contexts.

Nice To Haves

• Experience with OpenTitan.
• Experience with boot ROM development and silicon device bring-up.

Responsibilities

• Develop and test ROM, bootloader, and run-time firmware for enabling secure boot on security processors and Root-of-Trust devices.
• Design and implement code-signing, key management, and software release processes that produce secured artifacts across diverse device configurations.
• Develop and integrate real-time operating systems like TockOS or Zephyr to provide cryptographic, lifecycle, and security-sensitive system services.
• Create and maintain security documentation including detailed firmware architecture diagrams, security hardening guides, and embedded threat models.
• Design and develop on-device attestation mechanisms and integrate with external certificate authorities.
• Provide guidance to development teams on secure coding practices, with emphasis on embedded-specific pitfalls.
• Work with the hardware security team to shape next-generation secure silicon that software can effectively leverage.
• Collaborate with the broader RISC-V industry on standardized approaches for Trusted Execution Environments and confidential computing extensions.
• Partner with third-party security experts to audit and validate firmware, RTOS integrations, and embedded system designs.

Benefits

• Highly competitive compensation package.
• Equal opportunity employer.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Number of Employees: 501-1,000 employees