Technical Leader- Platform Security
About The Position
As a Technical Leader on Cisco’s Platform Security team, you will be the primary authority on platform security, steering the architecture, development, and integration of robust security solutions. You will work across hardware, firmware, Linux, and networking operating systems such as SONiC to establish a secure chain of trust. Your leadership will define how platforms are protected throughout their lifecycle, ensuring integrity from manufacturing through production deployment. The team builds the secure foundation for next-generation networking and collaborates across disciplines to make security fundamental to platform architecture.
Requirements
- Bachelor’s degree with 8 years of related experience, or Master’s degree with 6 years of related experience, or PhD with 3 years of related experience.
- At least 5 years of experience in C/C++ and Python/shell, with demonstrated ability to debug across firmware, Linux, and hardware layers.
- At least 8 years of experience in platform, firmware, or system security.
- At least 5 years of specific expertise in UEFI Secure Boot, Linux boot/kernel architectures, and hardware Root of Trust (TPM or equivalent).
- 8 years of strong Linux system expertise, covering boot processes, kernels, drivers, and firmware interfaces within SONiC or similar networking operating systems.
Nice To Haves
- Experience with OpenBMC, Caliptra/DICE, or PKI/X.509 standards.
- Proficiency in kernel/module signing and working with NPU platforms.
- Familiarity with FIPS/Common Criteria compliance or relevant open-source security contributions.
Responsibilities
- Define comprehensive platform security strategies, including Root of Trust, Secure/Measured Boot, attestation, firmware integrity, and key lifecycle management.
- Drive implementation of UEFI Secure Boot (PK, KEK, db, dbx), including enrollment, rotation, revocation, and debug processes.
- Integrate security protocols into Linux and SONiC environments, focusing on ONIE, kernel integrity, driver security, and firmware update mechanisms.
- Define and manage manufacturing and field provisioning of keys and certificates to ensure platform identity.
- Conduct platform threat modeling and lead security reviews.
- Mentor engineering teams across hardware, firmware, and software domains.
Benefits
- Medical, dental, and vision insurance, subject to plan eligibility rules.
- 401(k) plan with Cisco matching contribution.
- Paid parental leave.
- Short- and long-term disability coverage.
- Basic life insurance.
- Paid holidays and a floating holiday for non-exempt employees.
- Paid day off for employee’s birthday.
- Paid year-end holiday shutdown.
- Paid personal wellness days.
- Paid vacation or a flexible vacation time-off program, depending on employee classification.
- Paid sick time.
- Additional paid time away may be requested for critical or emergency family issues.
- Optional paid volunteer days.
- Annual bonuses for eligible non-sales roles.
- Employees may be eligible for Cisco restricted stock unit grants, subject to continued employment and vesting terms.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
