Product Security Engineer (Hardware)

Job Description

Our partner is looking for a Product Security Engineer, Hardware to strengthen the security of processor and SoC platforms through architecture analysis, attack research and practical security testing.

The role focuses on identifying weaknesses in processor hardware, Root of Trust, firmware and SoC designs, then turning known and emerging attack techniques into concrete tests and mitigation recommendations. You will work closely with hardware teams and contribute to security documentation, regulatory readiness and product security improvements.

Location: Barcelona, Spain, Hybrid
Level: Mid

Responsibilities

• Analyse processor, SoC, Root of Trust and firmware security

• Review hardware architecture and implementation for vulnerabilities

• Maintain hardware security specifications and technical documentation

• Research new hardware and platform attack techniques

• Reproduce published attacks against real implementations

• Develop new security tests and attack scenarios

• Identify microarchitectural, physical and memory related weaknesses

• Build proof of concept attacks using C and assembly

• Report vulnerabilities clearly and recommend mitigations

• Work with hardware teams to validate and resolve findings

• Support security certification and regulatory compliance activities

• Automate security testing and data analysis where relevant

Requirements

• 2 to 5 years of hardware security, computer architecture or systems security experience

• Master’s degree in a relevant technical field

• Strong understanding of RISC V architecture

• Processor microarchitecture and SoC knowledge

• Knowledge of hardware attack techniques

• Microarchitectural attack knowledge

• Physical and memory attack awareness

• C programming experience

• Assembly knowledge, ideally RISC V

• Ability to create security tests and attack proofs of concept

• Strong technical documentation skills

• Ability to work independently and with engineering teams

Optional / Desired

• Caliptra or OpenTitan

• Side channel analysis

• Fault injection

• Hardware security research or CTF experience

• Classical cryptography

• Post Quantum Cryptography

• Confidential computing

• Trusted execution environments

• Remote attestation

• Memory isolation

• EU CRA

• Common Criteria

• FIPS 140-3

• Python for test automation and analysis

What’s in it for you?

• Flexible working hours

• Hybrid model, 4 days office, 1 day from home

• 1 week per year working from anywhere

• 25 days annual leave plus December 24 and 31

• Monthly food allowance

• Private medical insurance

• Relocation bonus

• Housing search support

• Visa support if required

• Family relocation support

• Virtual shares

• Language classes

• Tax incentive, subject to eligibility