Staff Software Security Engineer

3 weeks ago


Cambridge UK CB AP, Cambridge, United Kingdom ARM Full time
Job Overview:

We are seeking a skilled and passionate security engineer to lead the central software security testing program across software in Arm. The role is within Arm's multifaceted Product Security team. You will have the opportunity to drive improvements in security of Arm software, and processes, and build security culture.

Responsibilities:
  • Develop comprehensive software security assessment methodology.
  • Conduct security assessments and code reviews to identify and remediate vulnerabilities in firmware and system software.
  • Review and advise on output of security testing, including DAST, SAST, SCA
  • Advance baseline for security testing across Arm's software.
  • Develop software fuzz testing strategy at Arm.
  • Enable engineering teams to implement security testing independently.
  • Keep up-to-date with industry best practices and developments in software security.
Required Skills and Experience :
  • Deep knowledge and expertise in developing and reviewing software threat models.
  • Experience writing secure code, and designing secure software specifically for low level software such as drivers, firmware.
  • Knowledge of well known industry standard fuzzing tools such as AFL, libfuzzer, syzcaller.
  • Demonstrated skills for secure code reviews (C/C++) of complex software projects.
  • Experience in automation using scripting languages (e.g., Python).
  • Experience in performing Software Composition Analysis using tools such as Black Duck
“Nice To Have” Skills and Experience :
  • Expericence working with Arm's open source software.
  • Knowledge of Arm assembly.
  • Expericence in penetration testing.
  • Delivered software security training.
  • Experience in configuration and creation of rules for SAST tools such as Coverity and SonarQube.
  • Experience in performing root cause analysis for security issues.
  • Experience working with relevant security certification schemes (e.g., PSA Certified, common criteria, SESIP) and international standards (e.g, ISO 21434, IEC 62443).
In Return:

Arm is committed to global talent acquisition, offering an attractive relocation package. With offices worldwide, Arm is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to Arm's success in the global marketplace.

#LI-PD1



  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Arm is best known for the smartphone CPU and GPU technology connecting billions of people all over the world. Now we are building new software teams to take us to the next level.Technology built on Arm is all around us, from industrial and automotive applications, to the IoT, to the desktop and data centre. ‘Wherever Computing Happens’, we...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Arm is best known for the smartphone CPU and GPU technology connecting billions of people all over the world. Now we are building new software teams to take us to the next level.Technology built on Arm is all around us, from industrial and automotive applications, to the IoT, to the desktop and data centre. ‘Wherever Computing Happens’, we...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    The Arm Product Security Incident Response Team (PSIRT) is looking for a highly motivated, experienced addition to their team, to help deliver on Arm's commitment to coordinated vulnerability disclosure (CVD) and navigate the ever-changing landscape of product security. Growth in this area has created an opportunity join a highly visible and dynamic team...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    The Arm Product Security Incident Response Team (PSIRT) is looking for a highly motivated, experienced addition to their team, to help deliver on Arm's commitment to coordinated vulnerability disclosure (CVD) and navigate the ever-changing landscape of product security. Growth in this area has created an opportunity join a highly visible and dynamic team...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Arm’s Software Engineering group is responsible for creating and improving the software eco-system around Arm's next generation of applications processors. We help our partners build creative Arm-powered products, for various segments Mobile, Server, IoT connected devices, Augmented & Virtual Reality offerings, Autonomous Driving Solutions etc. and in...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Arm’s Software Engineering group is responsible for creating and improving the software eco-system around Arm's next generation of applications processors. We help our partners build creative Arm-powered products, for various segments Mobile, Server, IoT connected devices, Augmented & Virtual Reality offerings, Autonomous Driving Solutions etc. and in...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    JOB OVERVIEW:The Software (CE-SW) group is responsible for developing and improving the software ecosystem around Arm's next generation of applications processors. This frequently means working with processors and other hardware technology not yet available to the public. We work on a range of development platforms, software-models, FPGAs and early...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:We are seeking a skilled and passionate security engineer to own the effort of hardware security testing and assessment centrally across hardware products in Arm. The role is within Arm's multifaceted Product Security team. You will have the opportunity to drive improvements in security of Arm hardware systems, and processes, and build...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:We are seeking a skilled and passionate security engineer to own the effort of hardware security testing and assessment centrally across hardware products in Arm. The role is within Arm's multifaceted Product Security team. You will have the opportunity to drive improvements in security of Arm hardware systems, and processes, and build...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    The FPGA team is part of the global Productivity Engineering group which is responsible for delivering and supporting FPGA platforms at Arm - enabling designs debug and deployment of advanced pre-silicon verification methodologies. These system solutions target a wide range of market segments like mobile, server, IoT, automotive, etc.Job Description:As a...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    The FPGA team is part of the global Productivity Engineering group which is responsible for delivering and supporting FPGA platforms at Arm - enabling designs debug and deployment of advanced pre-silicon verification methodologies. These system solutions target a wide range of market segments like mobile, server, IoT, automotive, etc.Job Description:As a...

  • Software Engineer

    3 weeks ago


    Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Arm is best known for the smartphone CPU and GPU technology connecting billions of people all over the world. Now we are building new software teams to take us to the next level.Technology built on Arm is all around us, from industrial and automotive applications, to the IoT, to the desktop and data centre. ‘Wherever Computing Happens’, we...

  • Software Engineer

    2 weeks ago


    Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Arm is best known for the smartphone CPU and GPU technology connecting billions of people all over the world. Now we are building new software teams to take us to the next level.Technology built on Arm is all around us, from industrial and automotive applications, to the IoT, to the desktop and data centre. ‘Wherever Computing Happens’, we...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Arm is seeking a Software Engineer to join the Productivity Engineering Group at Arm in Cambridge! As part of this team, you will develop solutions that automate specification, design, and documentation of next-generation Arm Products! With this job you will be based in Cambridge and be developing tools as part of a productivity engineering hardware...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Arm is seeking a Software Engineer to join the Productivity Engineering Group at Arm in Cambridge! As part of this team, you will develop solutions that automate specification, design, and documentation of next-generation Arm Products! With this job you will be based in Cambridge and be developing tools as part of a productivity engineering hardware...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Are you interested in working on pioneering compiler technology whilst helping to lead and develop our team of dedicated engineers to achieve their full potential? We have an opening for an exciting and varied role in our GNU Tools team in Cambridge, UK.In this role you will collaborate with the GNU community, contributing to the open-source GCC...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:Are you interested in working on pioneering compiler technology whilst helping to lead and develop our team of dedicated engineers to achieve their full potential? We have an opening for an exciting and varied role in our GNU Tools team in Cambridge, UK.In this role you will collaborate with the GNU community, contributing to the open-source GCC...

  • Staff DevOps Engineer

    3 weeks ago


    Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:We are seeking a highly motivated and creative person to join our Cambridge-based toolchain performance team.This is an excellent opportunity for a candidate with a keen interest in Dev Ops, software quality and performance testing, who wants to influence the future of Arm IP and the Arm eco-system.Our team works on a diverse range of compilers...

  • Staff DevOps Engineer

    2 weeks ago


    Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:We are seeking a highly motivated and creative person to join our Cambridge-based toolchain performance team.This is an excellent opportunity for a candidate with a keen interest in Dev Ops, software quality and performance testing, who wants to influence the future of Arm IP and the Arm eco-system.Our team works on a diverse range of compilers...


  • Cambridge, UK, CB2 3AP, Cambridge, United Kingdom ARM Full time

    Job Overview:We are looking for a Software Engineer to join our Functional Safety compiler team to work on our next generation C++17 compiler.The Arm Compiler for Embedded product is based on LLVM and Clang, and our team works on the qualification and certification of the compiler to Functional Safety standards such as ISO 26262 and the Cybersecurity...