remote
Sr Lead Security Engineer - JPMorganChase
Security Engineer
Lead security engineer responsible for evaluating and hardening hardware and firmware across server, network, laptop, and IoT platforms using source‑code review, fault injection, side‑channel analysis, and supply‑chain risk assessments.
About the role
Key Responsibilities
- Design and execute comprehensive hardware and firmware security assessments, including source‑code review, fault injection, and side‑channel analysis.
- Analyze complex hardware designs and firmware implementations on AMD and Intel server platforms, network devices, laptops, and IoT products to uncover vulnerabilities.
- Perform bill‑of‑materials (BOM) and supply‑chain risk analyses to detect unauthorized component modifications and potential threats.
- Identify and investigate Indicators of Compromise (IOCs) within firmware and hardware across the enterprise infrastructure.
- Provide technical leadership, mentor junior engineers, and define security testing methodologies and best practices.
Requirements
- 5+ years of hands‑on experience in hardware and firmware security, including vulnerability research and mitigation.
- Deep knowledge of fault injection techniques, side‑channel analysis, and secure boot processes.
- Proven experience assessing supply‑chain risks and performing BOM content security reviews.
- Strong understanding of AMD, Intel, network, and IoT architectures.
- Excellent problem‑solving skills and ability to communicate complex findings to technical and non‑technical stakeholders.
Skills
pythonlinuxvhdlverilog