Principal PSIRT Software Engineer

WHAT YOU DO AT AMD CHANGES EVERYTHING

We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives. 

AMD together we advance_

THE ROLE:

AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs.  The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners.

The person:

To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response.  You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels.  You prioritize and balance multiple work streams on tight deadlines.

Key Responsibilities:

• Analyze security vulnerabilities and help define remediation strategies, communicate with customers and security researchers, and work cross-functionally with other internal stakeholder groups to drive resolution of security issues.
• Assess, identify and communicate risks from security vulnerabilities to internal stakeholders, providing guidance regarding vulnerability response
• Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products
• Develop and implement a threat intelligence program
• Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners
• Provide recommendations for improving vulnerability management with an eye on automation

Preferred Experience:

The ideal candidate will have demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, SOC, or hardware security-oriented definition.

• Strong understanding of computer architecture systems and concepts, including CPU architecture, fundaments of the system memory hierarchy and caches, and underlying system hardware and firmware.
• Knowledge of existing hardware architecture(s) (prefer x86 and/or ARM) including associated security and/or virtualization extensions.
• Familiarity with typical software/hardware interfaces and driver techniques.
• Proficient in C/C , RUST, Python development and understanding of assembly level instructions sets (AMD64 or ARM)
• Experience designing and/or implementing secure systems, including concepts such as threat modeling, security architecture, protocol design, network security, and operating system security.
• Familiarity and experience in PC Client / Data Center / IoT interconnect standards and associated underlying technologies and protocols like: PCI Express, Compute Express Link (CXL), SPI, I2C / I3C & USB
• Eagerness and ability to quickly learn new concepts
• Great teammate, ability to work in cross-site and matrix environments
• Possess fundamental knowledge of security principles and properties, including confidentiality, integrity, availability, authentication, authorization, and auditing
• Knowledge of cryptographic algorithms.
• Development experience with micro-kernels and/or real-time OS’es.
• Familiarity in operating systems and virtualization technologies, especially around Linux kernel and driver level development, hypervisors/virtual machines, and containers.
• Familiarity with SaaS, PaaS, IaaS and container systems like Kubernetes a plus.

Academic credentials:

A degree in Computer Science, Electrical and Computer Engineering, or related subjects

Location: Raleigh, North Carolina

#LI-PA1

 #HYBRID 

At AMD, your base pay is one part of your total rewards package.  Your base pay will depend on where your skills, qualifications, experience, and location fit into the hiring range for the position. You may be eligible for incentives based upon your role such as either an annual bonus or sales incentive. Many AMD employees have the opportunity to own shares of AMD stock, as well as a discount when purchasing AMD stock if voluntarily participating in AMD’s Employee Stock Purchase Plan. You’ll also be eligible for competitive benefits described in more detail here.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law.   We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.