About the Role
Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Offensive Security Engineer, you will help to ensure that our software and systems are designed and implemented to the highest security standards.
Responsibilities
•Identify security flaws before they can be exploited, using offensive security techniques across the full software and firmware stack.
•Development of comprehensive threat models covering all targeted usages and deployments of Openchip SW Stack.
•Create and maintain high-quality security guidance documentation, including best practices, design recommendations, and threat mitigation strategies.
•Drive the alignment of OpenChip products with industry-recognized security standards (e.g., FIPS 140-3, NIST SP 800-193, ISO/IEC 27001).
•Conduct deep technical investigations in areas such as microarchitectural security (e.g., side-channel attacks), cryptographic weaknesses, fuzzing and reverse engineering, code and architecture-level security reviews, logic and memory vulnerabilities (e.g., kernel/firmware privilege escalation).
•Interact with colleagues across projects to unblock issues, or to reach consensus on technical topics.
•Collaborate with colleagues through code reviews, bug triaging, design documents, and more.
•Contribute to shared team responsibilities (CI failure triaging, documentation, code fixits, rotations, etc.).
•Work with validation teams on required test cases, coverage, and methodologies to ensure robust security verification.
•Work with support Quality team by delivering security guidelines and best practices for implementing a secure development lifecycle (SDL).
•Work with hardware teams, providing requirements for security and influencing hardware/software co-design.
Requirements
•Bachelor or Master's degree in a relevant field.
•Experience in the relevant field (5-10yr).
•Experience with standard tools for source control (git), continuous integration, task management (Jira).
•Solid knowledge about computer architecture (CPU, cache and memory hierarchy, buses, etc.).
•Knowledge about at least two of the following areas: microarchitectural security (side channel attacks, fault injection); platform security features (kernel/firmware hardening, CHERI, CFI, pointer tagging, virtualization-based security, IOMMU); cryptography usage across networks (certificates, signatures, TLS/SSL, PK, remote attestation); boot integrity technologies (UEFI Secure Boot, measured boot, TPM).
•Cryptography, including experience with cryptography libraries (OpenSSL, libssl, wolfssl, mbedtls, libsodium).
•Team player: communicative and collaborative person who focuses on the outcome of the team above the individual needs.
•Curious about learning new technologies/stacks.
•Capable of within- and cross-team collaboration at the technical level.
•Can-do attitude, proactive and willing to step up and resolve any obstacle.
•Self-aware, self-starter, and self-motivated.
Nice to Have
•Experience designing for relevant security standards (TCG, IEEE, NIST, FIPS, PCI, ISO 28000 series).
•Experience designing for crypto security (e.g. certificate handling and PKI, attestation, TPM/HSM).
•Expert knowledge of common security-relevant protocols (e.g. SSH, TLS, DNS, DHCP, NTP, ICMP).
•Expert knowledge of Linux, and hypervisor security.
•Experience with open source software development, in particular engagement with OpenSSF or other Open Source security organizations, and/or history of contributions to Open Source projects.
Conditions
•The opportunity to build a cloud AI deployment platform that will power next generation AI systems.
•A collaborative, innovation-driven environment with significant autonomy and ownership.
•Hybrid work model with flexible scheduling.
•A chance to join one of Europe's most ambitious companies at the intersection of AI and silicon engineering.
