Product Security Engineer - Audio Tech

At Bose Corporation, we believe sound is the most powerful force on earth — and for over 60 years, we have been a company built on innovation, excellence, and independence. Privately owned, fiercely customer-focused, and driven by our values, we continue to lead industries and transform lives through sound. Today, Bose Corporation is entering an exciting new era. Across multiple global Business Units and Global Functions, we are shaping the future of audio technology, automotive, luxury, and premium experiences.

We invite you to join us in this transformation.

Job Description Join the future of product security at Bose At Bose, security and stability are the two pillars of our product innovation. We are seeking a Security Engineer to support the product security initiatives of our growing Audio Technology business. You will play a central role in securing Bose's proprietary audio technologies. As Bose continues to innovate, there is a constant need to protect our intellectual property and embed security throughout the development lifecycle.

The ideal candidate has extensive experience in secure software development within a fast-paced, agile product environment. Join our Product Security team to help power the next wave of innovation ncipal Duties and Responsibilities As a Security Engineer, you will work as an integral part of the Product Security team to embed security practices into every aspect of the secure development pipeline from concept through release of licensed IP.

Our development philosophy is to enable developers to write secure code faster. Responsibilities for this job include:

Architecting and implementing protections for intellectual property, including anti-reverse engineering, secure firmware distribution, and debug interface lockdown

Collaborating with cross-functional teams including product firmware, Audio Technology, Dev Ops, cloud engineering, manufacturing, and program management

Architecting and designing products to guarantee secure practices, data confidentiality, and system integrity

Engineering and implementing ARM Trust Zone secure applets, implementing a cryptographic IoT device identity and root of trust

Streamlining secrets, key management, cryptography, and credential management

Defining security requirements and conducting security assessments

Implementing firmware and intellectual property (IP) protection mechanisms to safeguard proprietary software and embedded technologies

Performing obfuscation of firmware and algorithm binaries to protect against reverse engineering and unauthorized modification

Integrating firmware encryption, digital signing, and integrity verification into embedded software and secure update processes

Ensure compliance with applicable security regulations and standards (e.g., EU CRA, ETSI EN 303 645, NIST) and support audits and certifications

Advising engineering peers on security matters in the form of architectural guidance, code/design reviews, and solution development

Improving vulnerability discovery, patching processes, and leading responses to external security threats

Performing security testing on products and supporting security fix implementations

Designing and maintaining private X.509 and JWK chains of trust used for validating the authenticity of portable audio devices

Stay up-to-date on security news, relevant technologies, user groups, industry trends, and emerging security opportunities

Be a stakeholder on interdisciplinary teams advocating for security

Qualifications

Experience delivering licensed software that runs on customer products and systems where you do not trust the system it runs on.

Hands-on experience implementing firmware protection mechanisms, including secure boot, firmware encryption, digital signing,…