Product Security Architect

Job Title: Product Security Architect

Location: Fremont, CA (Hybrid)

Job Type: Contract

Job Overview

We are seeking a senior, hands-on Product Security Architect to drive product security across our client's entire hardware portfolio — from silicon to cloud. This high-visibility role owns the full lifecycle of product security: architecting and implementing security controls, driving regulatory compliance, leading certification efforts, managing vulnerability programs, and serving as the primary technical liaison for external penetration testers and independent security researchers.

Required Skills

• 12+ years in product/embedded security, IoT security architecture, or hardware security engineering
• Deep expertise in ARM TrustZone (Cortex-A TEE/OP-TEE, TrustZone-M), secure boot, and hardware Root-of-Trust
• Hands-on experience with HSM/TPM/secure element integration and cryptographic key management
• Strong knowledge of TLS 1.2/1.3, mutual TLS, X.509 PKI, and certificate lifecycle management
• Production experience with secure OTA architectures: firmware signing, A/B partitioning, anti-rollback
• Direct experience with EU Cyber Resilience Act and/or RED Delegated Act compliance
• Experience owning a PSIRT/vulnerability management function
• Proficiency in C/C++ for embedded systems (ARM Cortex-A and Cortex-M / 8051-class targets)
• Working knowledge of IEC 62443, ETSI EN 303 645, NIST SP 800-183