SoC Security Architecture & SDL Lead

Job Title

SoC Security Architecture & SDL Lead

Role Summary

Lead security architecture and the Secure Development Lifecycle (SDL) for Arm hardware security IP and SoC programs. Act as the technical authority and process owner to ensure security-by-design from concept through post-silicon delivery across multiple product segments.

Collaborate with hardware, firmware, verification and program teams to define threat models, Security Functional Requirements (SFRs), verification plans, and security documentation required for product release and certification.

Experience Level

Senior — lead-level role. Typically requires 7+ years of relevant experience in SoC security architecture, SDL, and product delivery or equivalent senior experience.

Responsibilities

Core responsibilities include technical leadership of security architecture and ownership of the SDL process.

• Define SoC and subsystem security architectures (Root of Trust, Secure Boot, Key Management, Confidential Compute, Authentication, Encryption, secure manufacturing and device lifetime management).
• Develop and maintain threat models, derive SFRs, and ensure traceability through design, verification, and validation.
• Own and implement the Solution SDL: create SDL artifacts, integrate SDL checkpoints into program plans, and coordinate for audits and certifications.
• Define security V&V plans with verification and validation teams and ensure SFRs are testable and validated pre- and post-silicon.
• Approve security sign-off criteria and ensure verification evidence supports release readiness.
• Mentor engineering teams and drive SDL adoption across global teams.

Requirements

Must-have technical experience and skills; nice-to-have items listed separately.

• Proven leadership in SoC security architecture and delivery for silicon products.
• Hands-on experience with Root of Trust, Secure Boot, Key Management, Confidential Compute, and secure manufacturing/device lifecycle.
• Experience performing threat modeling, deriving SFRs, and maintaining traceability through development and verification.
• Practical knowledge of cryptographic design, firmware security, and fault/side-channel mitigation techniques.
• Experience owning and implementing Secure Development Lifecycle processes and producing SDL artifacts (Threat Models, Architecture Reports, V&V Plans, Key Management Plans).
• Experience supporting security certifications and assessments such as PSA Certified, FIPS 140-3, ISO/SAE 21434, and Common Criteria, and coordinating external audits.
• Strong collaboration and communication skills for coordinating cross-functional global engineering teams.

Nice to have:

• Experience with penetration testing or security assessment programs.
• Experience with manufacturing security and large-scale device provisioning.

Education Requirements

Not specified.

About the Company

Company: Arm

Headquarters: Cambridge, United Kingdom

ARM is a global leader in semiconductor and software design, driving innovation in computing technology. The company specializes in designing processors and systems that provide the essential building blocks for electronic devices. ARM's architecture is widely used in smartphones, servers, and IoT devices, and its collaborative culture fosters bold thinking, diversity, and high-impact benefits for its talented workforce.