[Hiring] Senior Firmware Security Engineer @Cornelis Networks, Inc.

Role Description

As a Senior Firmware Security Engineer, you will design and deliver security-critical firmware for advanced networking hardware. This is a hands-on role with leadership expectations: approximately 70% individual contributor and 30% technical mentorship/leadership.

• Work across secure boot, firmware signing, and cryptographic protocol implementation on embedded platforms (ARM, RISC-V, and custom ASIC environments).
• Partner closely with silicon, platform, and validation teams.

Key Responsibilities:

• Design, implement, and maintain firmware in C/C++ with automation/tooling in Python.
• Build and harden secure boot and chain-of-trust mechanisms.
• Own and improve firmware signing and image authentication workflows.
• Implement and integrate cryptographic protocols for device trust and secure communications.
• Perform threat modeling, security design reviews, and vulnerability remediation for firmware components.
• Define and execute firmware security validation strategies (negative testing, robustness, tamper scenarios).
• Mentor engineers through code reviews, design guidance, and secure development best practices.
• Collaborate cross-functionally with architecture, hardware, and software teams to deliver secure product releases.

Qualifications

• 7+ years of embedded/firmware software engineering experience, including security-focused development.
• Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Computer Science, or equivalent experience.
• Strong proficiency in C/C++ and practical proficiency in Python.
• Proven experience with:
  • Secure boot
  • Firmware signing / image authentication
  • Applied cryptography in embedded systems
• Experience on one or more target architectures: ARM, RISC-V, or custom ASIC/SoC platforms.
• Strong debugging and root-cause skills for low-level systems.
• Ability to lead technically while remaining deeply hands-on.

Requirements

• Experience in high-performance networking, interconnects, or data center/HPC systems.
• Familiarity with device attestation and management security standards (e.g., SPDM/PLDM concepts).
• Experience building secure firmware delivery/update pipelines and release validation frameworks.
• Knowledge of security compliance frameworks and secure SDLC practices for embedded products.
• Familiarity with Post-Quantum Cryptography (PQC) and NIST PQC standards (e.g., ML-DSA/Dilithium, ML-KEM/Kyber), including hybrid classical+PQC signing and key exchange in embedded contexts.

Benefits

• Competitive compensation package that includes equity, cash, and incentives.
• Health and retirement benefits.
• Medical, dental, and vision coverage.
• Disability and life insurance.
• Dependent care flexible spending account.
• Accidental injury insurance and pet insurance.
• Generous paid holidays.
• 401(k) with company match.
• Open Time Off (OTO) for regular full-time exempt employees.
• Other paid time off benefits include sick time, bonding leave, and pregnancy disability leave.