Software Engineer (PKI & Security)
Boston, MA
zeroRISC
zeroRISC is redefining chip security and supply chain integrity by empowering device owners and operators in crucial sectors like silicon production, IoT, and critical infrastructure with full device ownership, control, and visibility. Led by the founders of the OpenTitan secure silicon project, zeroRISC is driving commercial adoption of open-source silicon enabled hardware designs and software services to give customers and end users the power to separate device security from its supply chain by forging an immutable connection between hardware and software during production.
Role Overview
As a Software Engineer at zeroRISC, you will play a critical role in building services that provide critical guarantees enforced by secure silicon to ensure integrity and security through the entire device lifetime. You will work closely with senior engineers to create services that are both functional and secure, helping us address security vulnerabilities before they become risks or exploits. Our fast-paced startup environment requires adaptability, ability to learn quickly, and thinking critically about the long term implications of design decisions.
We are strong believers in open-source hardware and software, and leading contributors to the OpenTitan open-source silicon project. Familiarity with open-source development norms and practices are considered a strong plus.
zeroRISC is redefining chip security and supply chain integrity by empowering device owners and operators in crucial sectors like silicon production, IoT, and critical infrastructure with full device ownership, control, and visibility. Led by the founders of the OpenTitan secure silicon project, zeroRISC is driving commercial adoption of open-source silicon enabled hardware designs and software services to give customers and end users the power to separate device security from its supply chain by forging an immutable connection between hardware and software during production.
Role Overview
As a Software Engineer at zeroRISC, you will play a critical role in building services that provide critical guarantees enforced by secure silicon to ensure integrity and security through the entire device lifetime. You will work closely with senior engineers to create services that are both functional and secure, helping us address security vulnerabilities before they become risks or exploits. Our fast-paced startup environment requires adaptability, ability to learn quickly, and thinking critically about the long term implications of design decisions.
We are strong believers in open-source hardware and software, and leading contributors to the OpenTitan open-source silicon project. Familiarity with open-source development norms and practices are considered a strong plus.
Key Responsibilities:
- Design and implement PKI and other platform services to support hardware secure elements throughout their lifecycle.
- Creating high-availability and security-critical services that follow deployment best practices, including robust observability tools, secure update mechanisms, and automated release pipelines.
- Work with senior engineers to identify and address potential security risks
- Create and maintain detailed documentation for software systems, including security constraints and considerations
- Stay up-to-date with the latest security threats and hardware security best practices. Quickly learn new technologies, tools, and methodologies in a startup environment to enhance both the performance and security of software systems
What We’re Looking For:
- Bachelor’s or Master’s degree in Computer Science or a related field
- Familiarity with Linux as a deployment platform.
- Familiarity with the Go programming language
- A strong understanding of system design for practical security, including PKI and code signing infrastructure
- Ability to think critically about potential security risks and vulnerabilities in deployed hardware and software systems
- Strong teamwork and communication skills to work effectively with senior engineers, product teams, and other stakeholders
Preferred Qualifications (not required but a plus):
- Experience with the setup and maintenance of networks, servers, and/or distributed systems at scale.
- Familiarity with at least one lower-level language (e.g. C/C++, Rust) and advanced knowledge of Linux as a development environment.
- Experience with public key infrastructure (PKI) systems and certificate management
- Basic understanding of applied cryptography
- Familiarity with cloud platform configuration
Why Join Us?
- Your work will directly contribute to the development of cutting-edge security solutions, protecting critical systems in industrial and IoT environments
- As a seed-stage startup, this role offers significant opportunities for learning and career growth
- Join a close-knit, innovative team where you can learn, grow, and contribute to building something meaningful in the security space
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Job stats:
2
0
0
Category:
Security Engineering Jobs
Tags: C Certificate management Cloud Computer Science Cryptography Exploits Industrial IoT Linux PKI Rust Vulnerabilities
Perks/benefits: Career development Startup environment
Region:
North America
Country:
United States
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.
Information Security Officer jobsInformation System Security Officer jobsSenior Security Analyst jobsSenior Cybersecurity Engineer jobsSenior Cloud Security Engineer jobsSystems Engineer jobsSystems Administrator jobsInformation Security Manager jobsSenior Information Security Analyst jobsSenior Network Security Engineer jobsIT Security Engineer jobsCyber Security Specialist jobsChief Information Security Officer jobsIT Security Analyst jobsSecurity Consultant jobsSecurity Specialist jobsInformation System Security Officer (ISSO) jobsSenior Cyber Security Engineer jobsInformation Systems Security Engineer jobsCyber Threat Intelligence Analyst jobsSenior Information Security Engineer jobsThreat Intelligence Analyst jobsCyber Security Architect jobsSecurity Operations Analyst jobsSenior Product Security Engineer jobs
GDPR jobsSaaS jobsEncryption jobsBash jobsSplunk jobsTop Secret jobsSQL jobsEDR jobsFinance jobsMalware jobsThreat detection jobsRMF jobsIDS jobsSDLC jobsForensics jobsIPS jobsITIL jobsTerraform jobsDocker jobsIntrusion detection jobsCompTIA jobsActive Directory jobsDoDD 8570 jobsSOC 2 jobsOWASP jobs
SAP jobsCRISC jobsGIAC jobsUNIX jobsSANS jobsHIPAA jobsAnsible jobsCCSP jobsOSCP jobsJira jobsBanking jobsSOX jobsVPN jobsTCP/IP jobsSOAR jobsIT infrastructure jobsMITRE ATT&CK jobsMachine Learning jobsJavaScript jobsClearance Required jobsVMware jobsData Analytics jobsIndustrial jobsCISO jobsNIST 800-53 jobs