Overview

Arm is seeking an expert Principal Product Security Engineer to lead and run interactions with external security laboratories and certification bodies. As a senior member of the Product Security team, you will lead different aspects of security evaluations, coordinate certification activities, and ensure that our products meet industry standard methodologies and regulatory requirements.

This role is relevant in guaranteeing that Arm products achieve and maintain the vital assurance levels through detailed, evaluation processes.

Responsibilities

• Act as the primary technical work with accredited third-party security laboratories responsible for evaluating Arm products
• Lead, coordinate, and run end-to-end security evaluation and certification programs, including planning, execution, documentation, and closure
• Ensure that all evidence, documentation, test vectors, and artefacts required for certification are accurate, complete, and delivered on schedule
• Review and validate lab findings, ensuring corrective actions are implemented and retested when needed
• Maintain up-to-date knowledge of evolving certification standards (e.g., Common Criteria, PSA Certified, SESIP, FIPS, OCP safe, ISO21434, IEC 62443, etc.)
• Establish and maintain clear, comprehensive, and current documentation for all evaluation processes and certification workflows
• Provide internal guidance and mentoring on evaluation methodologies, certification readiness, and standards

Required Skills & Experience

• 10+ years of experience in product security, security evaluation, certification, or a related field
• Strong understanding of security evaluation schemes such as Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA or similar frameworks
• Confirmed experience collaborating with external security laboratories and navigating formal evaluation processes
• Confirmed understanding of cryptographic primitives, secure key lifecycle management, and secure provisioning workflows
• Experience with silicon/SoC security architecture, including threat modelling, attacker models, and countermeasures
• Good organizational skills with the ability to handle sophisticated, multi-stakeholder projects
• Excellent communication, negotiation, and documentation abilities
• Ability to work with multi-functional engineering, product, and security teams

Nice-to-Have Skills

• Experience with secure hardware components such as cryptography accelerators, RoT modules, Secure enclaves, HSMs, or TEE/TF-M environments
• Experience with secure firmware components such as secure Boot Rom, Bootloader, TFM/TFA, OP-TEE, hyper/micro-visor etc.
• Practical knowledge of semiconductor manufacturing flows and supply chain security
• Familiarity with side-channel analysis, fault-injection testing, and hardware penetration testing methodologies

Additional Information

Please note that a relocation package (including visa sponsorship support) is available for this role, for candidates who require it.

#LI-CI