Staff Software Security Engineer

Arm; Cambridge; On-site; GBP 50,000 - 90,000; Full time

Job description

Job Overview:

We are looking for a talented Security Engineer to join Arm’s Product Security team. In this role, you will play a key part in enhancing the security of Arm’s software and processes, while contributing to building a strong security engineering culture across the organization.

Responsibilities:

• Conduct security assessments across Arm's firmware, drivers and system software.
• Review and advise on output of various Security Development Lifecycle (SDLC) stages such as threat modeling, security testing, including DAST, SAST, SCA.
• Enable engineering teams to implement various stages of Arm's SDLC independently.
• Provide consultation on specific areas of software security and on the application of SDLC to the engineering teams.
• Keep up-to-date with industry best practices and developments in software security.
• Continuously improve Arm's approach to software security by refining software security best practices.

Required Skills and Experience:

• Deep knowledge and expertise in developing and reviewing software threat models.
• Detailed experience in security concept design, mitigation analysis.
• Experience writing secure code, and designing secure software specifically for low level software such as drivers and firmware.
• Demonstrated skills for secure code reviews (C/C++) of complex software projects.
• Experience in automation using scripting languages (e.g., Python).
• Experience in performing Software Composition Analysis using tools such as Black Duck.
• Experience in implementing Security Development Lifecycle in an organization.

“Nice To Have” Skills and Experience:

• Experience working with Arm's open source software.
• Knowledge of Arm assembly.
• Delivered software security training.
• Experience in configuration and creation of rules for SAST tools such as Coverity and SonarQube.
• Experience working with relevant security certification schemes (e.g., PSA Certified, common criteria, SESIP) and international standards (e.g., ISO 21434, IEC 62443).

In Return:

Arm is committed to global talent acquisition, offering an attractive relocation package. With offices worldwide, Arm is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to Arm's success in the global marketplace.