Hardware Security Engineer Jobs

About the Role As a Hardware Security Engineer, you’ll contribute to building open, transparent, and secure AI systems. You’ll have the opportunity to work on projects that safeguard corporate assets by implementing and operating preventative and reactive security controls while collaborating with teams and stakeholders across the company. We’re looking for an intern that is interested in building AI-assisted security apps. Responsibilities Design, prototype, and implement security solutions for AI infrastructure across hardware, firmware, operating systems, and cloud services, including BMCs, TPMs, secure boot chains, networking interfaces, and workload identity systems. Assess and improve the security posture of server and accelerator platforms, including firmware update processes, device identity, trusted execution, and hardware-backed cryptography. Support the secure platform lifecycle, from device onboarding, provisioning, and inventory through configuration validation and decommissioning. Build automation and internal tools in Python, Bash, or similar languages to collect platform telemetry, detect configuration drift, and support incident investigation. Build AI-assisted security applications for asset classification, anomaly detection, and detection-and-response workflows. Partner with IT and infrastructure teams to implement and enforce identity, access-control, endpoint, and privileged-access security practices. Research and evaluate emerging technologies such

About the Role As a Hardware Security Engineer Intern, you’ll contribute to building open, transparent, and secure AI systems. You’ll have the opportunity to work on projects that safeguard corporate assets by implementing and operating preventative and reactive security controls while collaborating with teams and stakeholders across the company. We’re looking for an intern that is interested in building AI-assisted security apps. Responsibilities Help design, prototype, and assess security solutions for AI infrastructure across hardware, firmware, operating systems, and cloud services, working with components like BMCs, TPMs, secure boot chains, and device and workload identity systems. Support secure platform lifecycle work such as device onboarding, provisioning, inventory, and configuration validation. Build automation and internal tools in Python, Bash, or similar languages to collect platform telemetry, detect configuration drift, or support incident investigations. Prototype AI-assisted security tools for tasks like asset classification, anomaly detection, or detection-and-response workflows. Research an emerging area such as confidential computing, remote attestation, or hardware roots of trust, and share your findings with the team. Own a well-scoped project from start to finish with mentorship from experienced engineers, delivering clean, well-documented code and presenting your results at the end of the internship. Requirements Bachelor’s degree (or equivalen

About the Team OpenAI’s Hardware organization develops AI-native silicon and system-level solutions for the unique demands of advanced AI workloads. Building on efforts like Jalapeño, the team is developing future generations of AI-native silicon and tightly integrated systems to power the next generation of frontier models. By co-designing chips, systems, tools, and methodologies, the team helps deliver faster, more efficient, and production-ready hardware for OpenAI’s supercomputing platform. About the Role We're seeking a Security Engineer to join our First-Party Hardware team. In this role, you will own the end-to-end security foundation for OpenAI's first-party AI hardware systems, working across hardware security, embedded security, system security, and practical deployment at data center scale. You will partner with silicon, hardware, firmware, infrastructure, manufacturing, operations, and security teams to define and deliver system-level device trust. This includes boot integrity, device identity, provisioning, attestation, management-plane security, storage encryption, debug controls, firmware update and recovery, RMA, and decommissioning. You will be accountable for turning threat models into requirements, requirements into implementation, and implementation into validation evidence that can support launch decisions. Location: San Francisco, CA (Hybrid: 3 days/week onsite) Relocation assistance available. In this role, you will: Own security requirements, threat mo

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're seeking a Platform Hardware Security Engineer to design and implement security architectures for bare-metal infrastructure. You'll work with teams across Anthropic to build firmware, bootloaders, operating systems, and attestation systems to ensure the integrity of our infrastructure from the ground up. This role requires expertise in low-level systems security and the ability to architect solutions that balance security requirements with the performance demands of training AI models across our massive fleet. Key responsibilities Design and implement secure boot chains from firmware through OS initialization for diverse hardware platforms (CPUs, BMCs, switches, peripherals, and embedded microcontrollers) Architect attestation systems that provide cryptographic proof of system state from hardware root of trust through application layer Develop measured boot implementations and runtime integrity monitoring Create reference architectures and security requirements for bare-metal deployments Integrate security controls with infrastructure teams without impacting training performance Prototype and validate security mechanisms bef

About Capco Capco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to support clients in complex transformation initiatives. At Capco, you will be part of a collaborative and entrepreneurial environment where you can work alongside experienced professionals, expand your expertise, and contribute to impactful projects across the financial services industry. The Role We are looking for an experienced Cryptography & Key Management Security Engineer with strong expertise in cryptographic technologies, PKI, Hardware Security Modules (HSMs), and secrets management. This is a specialist role for security professionals who enjoy combining hands-on operational responsibilities with security advisory and strategic project work . As a Cryptography & Key Management Security Engineer, you will support complex and business-critical security environments within the financial services sector. You will contribute to the secure management of cryptographic keys, digital certificates, and application secrets while helping organizations strengthen their cryptographic capabilities and prepare for future security challenges. You will collaborate with security specialists, architects, application teams, infrastructure experts, and other stakeholders to translate security and regulatory requirements into secure, scalable, and operationally f

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Platform Security Engineering (PSE) sits within Data Center Security Engineering (DCSE). As Anthropic expands beyond traditional cloud providers into owned facilities, colocation, and partner sites, we take on the security responsibilities that cloud providers used to abstract away: firmware integrity, boot chain verification, platform trust, and host hardening. PSE exists so that Anthropic can deploy training and inference workloads to any qualified environment with a demonstrable security posture, including the technical controls behind our AI Safety Level commitments. We are hiring an engineering manager to lead a group of platform security engineers covering firmware research, OS and kernel hardening, platform trust integration, and server manageability firmware. You will own the roadmap for this group, grow the team, and be accountable for the security posture of the compute platforms Anthropic runs on: hardware roots of trust, secure and measured boot, attestation, firmware supply chain, and the integrity of the hosts that hold model weights on bare-metal infrastructure. This is a hands-on management role. You will not writ

We are hiring a Security Software Engineer to design and implement the hardware-backed security foundations used across OpenAI’s device ecosystem. A central focus of this role is hardening the boundary between our policy systems and the HSMs that protect sensitive cryptographic keys. This boundary determines which operations may be performed, what may be signed, which policies must be satisfied, and how changes to trusted software and policy are authorized. You will develop security-critical software and firmware within, or immediately adjacent to, an HSM trust boundary. Depending on your background, this may include HSM trusted applications, firmware services, cryptographic mechanisms, device drivers, PKCS#11 components, secure-provisioning protocols, or signing-policy enforcement systems. This is a hands-on software-engineering role. You will be expected to design systems, write and review production code, debug across hardware and software boundaries, and carry projects from initial requirements through deployment. It is not an HSM administration, PKI operations, compliance, or architecture-only position. In This Role, You Will Design and implement security-critical software and firmware for HSMs, secure elements, trusted execution environments, and hardware roots of trust. Build and harden the policy-to-HSM boundary responsible for authorizing certificate issuance and cryptographic signing operations. Develop HSM trusted applications, firmware components, host interfaces,

We are hiring a Security Software Engineer to design and implement the hardware-backed security foundations used across OpenAI’s device ecosystem. A central focus of this role is hardening the boundary between our policy systems and the HSMs that protect sensitive cryptographic keys. This boundary determines which operations may be performed, what may be signed, which policies must be satisfied, and how changes to trusted software and policy are authorized. You will develop security-critical software and firmware within, or immediately adjacent to, an HSM trust boundary. Depending on your background, this may include HSM trusted applications, firmware services, cryptographic mechanisms, device drivers, PKCS#11 components, secure-provisioning protocols, or signing-policy enforcement systems. This is a hands-on software-engineering role. You will be expected to design systems, write and review production code, debug across hardware and software boundaries, and carry projects from initial requirements through deployment. It is not an HSM administration, PKI operations, compliance, or architecture-only position. In This Role, You Will Design and implement security-critical software and firmware for HSMs, secure elements, trusted execution environments, and hardware roots of trust. Build and harden the policy-to-HSM boundary responsible for authorizing certificate issuance and cryptographic signing operations. Develop HSM trusted applications, firmware components, host interfaces,

About the Team & Role: We're building Rubrik Agent Cloud, the enterprise platform to monitor, govern, and remediate AI agents. Our team operates at the intersection of AI, distributed systems, and enterprise security, creating solutions that make it possible for organizations to operate production-grade AI agents at scale. As a member of the Rubrik Agent Cloud team, you'll work with cutting-edge AI technologies while solving complex challenges in scaling, security, and performance. We're a collaborative team passionate about pushing the boundaries of what's possible with enterprise AI infrastructure. Nature of the Specialized Duties ➢ Architecting and Governing Secure Multi-Cloud Foundations (30% of time) Leading the end-to-end architectural design and onboarding of complex business units into a multi-cloud ecosystem (AWS, Azure, GCP, OCI), ensuring structural parity across disparate environments. Engineering secure "Landing Zones" and multi-tenant structures using advanced Identity and Access Management (IAM) hierarchies and automated policy enforcement. Developing and implementing global Role-Based Access Control (RBAC) models and Attribute-Based Access Control (ABAC) frameworks to manage granular permissions for AI agent workloads. Designing and governing resource hierarchy models and tagging standards that utilize metadata for automated lifecycle management and complex cost-attribution algorithms. ➢ Engineering Security and Compliance at Scale for AI Workloads (

Information Systems Security Officer - Journeyman Location: Customer Site – Columbia, MD (CANX1) Job Type: Full Time Clearance Required: Active TS/SCI with CI Polygraph About SIXGEN SIXGEN delivers agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. Position Overview SIXGEN is seeking an Information Systems Security Officer (ISSO) - Journeyman to support the USCYBERCOM J6 C4 & Cyber Directorate. The selected candidate will help implement and maintain enterprise cybersecurity programs, ensure compliance with DoD security requirements, and protect critical information systems through effective risk management and security engineering practices. Responsibilities Plan, implement, upgrade, and monitor security measures to protect computer networks and information systems. Ensure appropriate security controls are implemented to safeguard digital assets and critical infrastructure. Respond to cybersecurity incidents, security breaches, and malware events. Apply cybersecurity policies, principles, and best practices across IT and cybersecurity services. Develop and design security solutions that maintain the confidentiality, integrity, and availability of enterprise information. Identify, pl

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role Block’s Detection and Response Team (DART) investigates and responds to threats across our products and systems. Within DART, the Computer Security Incident Response Team (CSIRT) leads complex investigations and coordinates the response to security incidents across the company. You’ll establish what happened, determine the scope and impact, guide containment and recovery, and keep responders and stakeholders aligned. You’ll be a trusted resource for your peers, contributing technical judgment and direction to complex investigations and helping the team make sound decisions. You’ll partner closely with engineers, other security teams, Legal, Privacy, and business leaders. Between incidents, you’ll innovate by building the tools, workflows, and procedures that make our response stronger. You Will Command complex, high-impact security incide

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role As a Principal Security Engineer focused on Software Security Engineering at Block, you will be a technical leader reporting to the CISO responsible for setting the bar for security excellence and driving the creation of innovative, world-class software solutions to complex security problems. You will work across Engineering and Information Security (InfoSec) to champion a "Secure by Design" culture, directly influencing the architecture of Block's core products and infrastructure. Your mandate is to provide deep technical expertise and strategic direction to ensure that security is enabling fast, secure innovation across the business. You Will Software Security Innovation : Deliver world-class and innovative software solutions to security problems, tackling Block's top risks such as technology fragmentation and security after-the-fact. T

About the Role Global Safety and Security (GSS) protects our people, our sites, and the physical and logical systems that keep the business running. Our security and protection programs are never single-team efforts: one rollout can touch physical security operations, customer experiences, site readiness, hardware provisioning, networking, cloud infrastructure, identity, and the data platforms above them — spanning many countries, on timelines tied to leases, permits, and vendors. About the Team We are hiring a Staff Security Engineer to help design and deliver strategic and durable security services. You own the technical and architectural plan, strategic partner engagement with technology providers, the delivery sequence, the dependencies, and the program status leadership relies on. You are accountable for outcomes influencing teams that you don’t manage. You will collaborate with software engineers, third-party providers, physical security operations, project managers running site readiness and provisioning, and networking and cloud infrastructure partners, and you will keep managers, directors, and senior leaders informed. Security Enablement Engineering delivers security paved paths and capabilities that address systemic security issues through well-designed customer experiences, easy-to-adopt and robust, well-architected security solutions, systematically reducing organizational risk. You’re excited about this opportunity because you will… Own the design of our p

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Application Security Engineer) to own the security of the software Hark ships. You'll review design and code, find and fix vulnerabilities in our backend services, mobile apps, and third-party integrations, and build the guardrails that let engineers move fast without shipping bugs. Our agents act on behalf of users across their apps and data, so you'll also be defining how to secure LLM and agent systems, a space with very few established playbooks. This role is hands-on; you'll be reading code, writing fixes, and building tooling, not managing or auditing. Responsibilities Threat-model new features and services, with a focus on agent/LLM attack surfaces (prompt injection, tool misuse, data exfiltration, cr

About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together, designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Information Security Engineer) to secure the infrastructure and systems Hark runs on. You'll harden our AWS environments, own identity and access across the company, build detection and response, and lead incident response when things go wrong. We run model training, agent sandboxes, and hardware manufacturing pipelines, so the environment is broader and more interesting than a typical SaaS stack. This role is hands-on; you'll be building and operating, not managing or auditing. Responsibilities Harden cloud infrastructure across multiple AWS accounts (IAM, EKS, VPC and network access paths, KMS) and review IaC for misconfigurations. Own identity and access: SSO, least-privilege IAM, just-in-time access, sec