Senior Security Firmware Engineer

Company Description

Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape.

Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality.

Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward.

• Development of various cryptography-based security features such as data encryption, Secure Boot, and Device Attestation.
• Integrate these security protocols and features into the SSD data and control flows to ensure a robust and secure system. Additionally, investigate and resolve any security protocol compatibility issues that may arise.
• Investigate failures, document bug reports, and provide valuable assistance to product teams in identifying and resolving issues.
• Debug, optimize, and validate the Firmware on SoC platforms, as well as bring up FPGA and ASIC.
• Contribute to the Security Development Lifecycle of the Firmware by supporting its development at different stages, including design, threat analysis, implementation, validation, vulnerability testing, certification, and audit.

• A degree in Computer Science, Electrical/Computer Engineering, Software Engineering, or a related field.
• 3+ years of experience in embedded programming, with proficiency in C/C++ and one or more of the following:
  Python, Rust, Go.
• Strong understanding of microcontroller architectures and debugging of hardware/firmware issues.
• Experience with firmware code review, CI/CD test and validation methodology, and static and dynamic code analysis. Familiarity with the Agile software development process life cycle is also desired.
• Proficiency in failure analysis of embedded firmware using JTAG/debuggers such as Lauterbach.
• An engineer who can take ownership of features and manage them from start to finish. Being self‑motivated and driven is essential.
• Good communication skills and the ability to work effectively with cross‑functional teams.

• Detailed knowledge of RISC‑V Instruction Set Architectures (ISA)
• Technical expertise in applied cryptography and firmware/hardware security, including data encryption, trusted execution environment, secure boot, and device attestation.
• Knowledge of storage controller architectures and security protocols, such as TCG Opal/Ruby/Pyrite, IEEE 1667, SPDM, and IDE.
• Experience developing firmware on SoC platforms, running simulations or bringing up FPGA and ASIC.
• Familiarity with writing code in Git Hub repositories and using CI/CD testing frameworks.

Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on race, color, ancestry, religion, sex, gender, age, national origin, sexual orientation, medical condition, marital status, disability, veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non‑discrimination policy applies to all aspects of employment.

We comply with the laws and regulations set forth in the "Know Your Rights:
Workplace Discrimination is Illegal" poster. Our pay transparency policy is available here.

Sandisk thrives on the power and potential of diversity. As a global company, we believe…