SoC Offensive Security Staff Engineer

Job Title

SoC Offensive Security Staff Engineer

Role Summary

Join the SoC Offensive Security team within Arm's Security Research and Response group to perform adversarial security assessments across pre- and post-silicon platforms. The role focuses on finding design- and integration-level vulnerabilities early in the development lifecycle and working with engineering teams to reduce risk.

Experience Level

Senior (Staff-level). Years of experience not specified.

Responsibilities

Lead practical adversarial analysis of SoC designs and collaborate with projects to improve security posture.

• Perform adversarial security analysis of SoC and chiplet micro-architectures across pre- and post-silicon environments.
• Review architecture, micro-architecture, system-level specifications, RTL implementations, and firmware.
• Participate in design reviews, security discussions, and hackathons to develop threat scenarios and adversarial tests.
• Develop PoCs, exploits, and demonstrations to show practical impact of findings.
• Use automation, scripting, and AI-assisted techniques to scale analysis, test generation, and triage.
• Investigate multi-stage and cross-component attack chains and recommend mitigations.
• Collaborate with internal researchers and engineering teams to accelerate assessments and remediation.
• Contribute to offensive security methodologies, tools, and team best practices.

Requirements

Key technical skills and proven experience required to operate effectively in this role.

• Must-have: Strong knowledge of SoC architecture and IP integration, including enumerating micro-architectural attack surfaces and subsystem threat modeling.
• Must-have: Demonstrated adversarial assessment experience (PoCs, exploits, CTFs, published security research).
• Must-have: Practical experience with SystemVerilog RTL and UVM-based validation environments; ability to adapt verification environments for offensive testing.
• Must-have: Hands-on lab experience setting up development and test platforms and validating findings in practical environments.
• Must-have: Firmware security analysis experience (examples: UEFI, uBoot, MCUBoot, Trusted Firmware).
• Must-have: Familiarity with security specifications/standards such as Caliptra or DICE and hardware roots of trust.
• Must-have: Strong problem solving, clear communication, and ability to independently conduct complex technical investigations.

Nice-to-have:

• Familiarity with hardware interfaces (PCIe, CXL, SMBus, SPI, I2C, UART).
• Familiarity with AMBA interconnects (AXI, CHI, CXS, APB, ATB, LPI).
• Experience with formal proof tools for HW security and hardware fuzzing (pre/post-silicon).
• Experience with TEEs, reverse engineering, software exploitation techniques, or contributions to security standards/working groups.

Education Requirements

Not specified.

About the Company

Company: Arm

Headquarters: Cambridge, United Kingdom

ARM is a global leader in semiconductor and software design, driving innovation in computing technology. The company specializes in designing processors and systems that provide the essential building blocks for electronic devices. ARM's architecture is widely used in smartphones, servers, and IoT devices, and its collaborative culture fosters bold thinking, diversity, and high-impact benefits for its talented workforce.