Apply on Employer Site

Tenstorrent · 23 hours ago

Staff Engineer, Platform Security Systems Software

United States

Full-time

Remote

Lead/Staff

$100K/yr - $500K/yr

8+ years exp

Tenstorrent is leading the industry on cutting-edge AI technology, revolutionizing performance expectations, ease of use, and cost efficiency. As a Staff Platform Security Software Engineer, you'll focus on developing and securing the lowest software layers that protect and power AI/ML and general compute devices, working closely with the hardware architecture team to enable a hardware-backed Root of Trust.

AI InfrastructureApplication Specific Integrated Circuit (ASIC)Artificial Intelligence (AI)ElectronicsMachine LearningSemiconductor

Comp. & Benefits

No H1B

U.S. Citizen Only

Responsibilities

Develop and test ROM, bootloader, and run-time firmware for enabling secure boot on security processors and Root-of-Trust devices. This is the code that executes before the rest of the world wakes up

Design and implement code-signing, key management, and software release processes that produce secured artifacts across diverse device configurations. You'll architect the entire trust chain from factory floor to field deployment

Develop and integrate real-time operating systems like TockOS or Zephyr to provide cryptographic, lifecycle, and security-sensitive system services while maintaining the deterministic timing that real-time demands

Create and maintain security documentation including detailed firmware architecture diagrams, security hardening guides, and embedded threat models. These become both reference material and survival guides for teams navigating embedded security

Design and develop on-device attestation mechanisms and integrate with external certificate authorities. Build the protocols that let devices prove their identity without revealing secrets that make cryptographers nervous

Provide guidance to development teams on secure coding practices, with emphasis on embedded-specific pitfalls. Buffer overflows in 32KB environments are an entirely different beast

Work with the hardware security team to shape next-generation secure silicon that software can effectively leverage. Hardware capabilities without usable software interfaces are just expensive sand

Collaborate with the broader RISC-V industry on standardized approaches for Trusted Execution Environments and confidential computing extensions. Help shape the open-source security standards that define the architecture

Partner with third-party security experts to audit and validate firmware, RTOS integrations, and embedded system designs. External scrutiny makes everything stronger

Qualification

Platform security engineeringEmbedded systemsFirmware developmentSecure boot mechanismsC/C++/Rust programmingCryptographic primitivesRTOS developmentSecurity assessmentsRISC-V architecture knowledgeWorking knowledge of TEECommunication

Required

Experienced platform security engineer with 8+ years delivering production security software, including 4+ years focused on embedded systems, silicon devices, and firmware development

Strong coding skills in C, C++, or Rust plus Go or Python

Deep expertise in secure boot, code-signing, and firmware update mechanisms, including hands-on experience with Hardware Security Modules and manufacturing provisioning workflows

Proven experience developing and testing bootloaders like U-Boot or Coreboot

Working knowledge of cryptographic primitives, public key infrastructure, device attestation, and secure computing architectures

Skilled in RTOS development and integration using platforms like TockOS, Zephyr, or similar real-time systems

Experience conducting security assessments and risk analysis for firmware and embedded systems

Excellent communication skills for translating complex hardware security concepts to cross-functional teams

RISC-V architecture knowledge is a significant plus, especially experience with TEE standardization, side-channel mitigation, and performance-optimized security implementations

Working knowledge of TEE and confidential computing solutions in embedded contexts