Engineering Manager, Hardware Platform Security

Responsibilities

• Lead and grow the platform security engineering group, including hiring, onboarding, development, performance, and prioritization for full-time engineers and coordination of contractor and vendor engineers.
• Own the platform security roadmap covering hardware roots of trust, attestation, secure and measured boot across CPU, BMC, accelerator, and peripheral firmware, OS and kernel hardening, and production attestation gates.
• Own firmware supply-chain security, including SBOMs, reference integrity manifests, authenticated updates, rollback protection, and vendor remediation.
• Drive platform risk assessments for new compute platforms and providers, making evidence-based go/no-go recommendations.
• Partner with infrastructure, fleet, compute, and detection and response teams to deploy platform controls without degrading workloads.
• Manage relationships with silicon vendors, OEMs, compute providers, and standards bodies, including security requirements, vulnerability remediation, and disclosure timelines.
• Run design reviews, threat modeling, platform-layer incident participation, and written status reporting for security and infrastructure leadership.

Requirements

• 10+ years of systems security experience, including at least 5 years focused on firmware, hardware, or OS-level security.
• 5+ years managing security or systems engineers, including hiring and developing senior and staff-level engineers.
• Deep understanding of secure boot, measured boot, TPMs and other roots of trust, attestation protocols such as SPDM, DICE, and remote attestation, UEFI, BMC firmware, and Linux kernel and OS hardening.
• Experience owning technical roadmaps and prioritizing trade-offs among security, performance, and delivery timelines.
• Experience working directly with silicon vendors, OEMs, cloud providers, or bare-metal providers on security requirements and remediation.
• Strong written communication skills for design reviews, risk assessments, and executive status updates.
• Ability to build teams and processes in an early-stage or expanding organization.
• Bachelor's degree or equivalent combination of education, training, and experience in a relevant field.

Nice-to-haves

• Experience managing mixed teams of full-time, contractor, and vendor engineers while retaining design authority internally.
• Experience with OpenBMC, server management firmware, DRTM, secure launch, or confidential computing primitives such as TDX, SEV-SNP, and ARM CCA.
• Upstream contributions or maintainership in Linux, OpenBMC, or comparable communities, or participation in TCG, UEFI Forum, or OCP.
• Experience securing large-scale HPC or AI training infrastructure.
• Firmware vulnerability research, reverse engineering, or fuzzing experience.
• Experience running coordinated vulnerability disclosure with hardware or firmware vendors.

Compensation

• Annual salary: $485,000–$625,000 USD