Sr. Product Security Incident Response Engineer

ADVANCE YOUR CAREER. ADVANCE THE WORLD. ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every role at AMD contributes to something bigger — technology that moves the world forward. Join us and, together, we’ll advance your career.

AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs. The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners, with a growing focus on AI infrastructure and AI workloads.

To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response. You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels. You prioritize and balance multiple work streams on tight deadlines.

• Analyze security vulnerabilities and help define remediation strategies; assess, identify and communicate risks from security vulnerabilities to internal stakeholders, providing guidance regarding vulnerability response; communicate with customers and security researchers, and work cross-functionally with other internal stakeholder groups to drive resolution of security issues.
• Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners.
• Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products.
• Develop and implement a threat intelligence program.
• Provide recommendations for improving vulnerability management with an eye on automation, applying AI-assisted tooling to accelerate vulnerability triage, analysis, and response, and help establish how the team uses it.

The ideal candidate will have demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, GPU, SOC, or hardware security-oriented definition.

• Strong grasp of computer architecture, CPU and GPU/accelerator design, memory hierarchy and caches, and underlying hardware/firmware, including existing architectures (x86, ARM, and/or GPU/accelerator) and their security/virtualization extensions.
• Experience securing AI/ML workloads and GPU/accelerator stacks (e.g., ROCm) and their security requirements at datacenter scale.
• Familiarity with software/hardware interfaces and driver techniques.
• Proficient in C/C++, Rust, and Python, with understanding of assembly instruction sets (AMD
  64 or ARM).
• Experience designing and/or implementing secure systems—threat modeling, security architecture, protocol design, network security, and OS security.
• Familiarity with PC Client / Data Center / IoT interconnect standards and protocols: PCIe, CXL, Ethernet, RDMA, SPI, I2C/I3C, and USB.
• Quick to learn new concepts; strong teammate in cross-site, matrix environments.
• Solid grasp of security principles—confidentiality, integrity, availability, authentication, authorization, and auditing—plus cryptographic algorithms.
• Development experience with micro-kernels and/or real-time OSes.
• Familiarity with OS and…