Social network you want to login/join with:
Staff Product Security Engineer, Cambridge
Client:
arm limited
Location:
Cambridge, United Kingdom
Job Category:
Other
-
EU work permit required:
Yes
Job Reference:
c1ff3b5e9fa8
Job Views:
25
Posted:
12.08.2025
Expiry Date:
26.09.2025
Job Description:
The Role
The Arm Product Security Incident Response Team (PSIRT) is looking for a highly motivated, experienced addition to their team, to help deliver on Arm's commitment to coordinated vulnerability disclosure (CVD) and navigate the ever-changing landscape of product security. Growth in this area has created an opportunity to join a highly visible and dynamic team at the cutting edge of technology.
Job Overview:
This role is based within the Arm PSIRT and is responsible for managing security vulnerabilities and incidents related to Arm's products and services. We continuously monitor for threats, assess vulnerabilities, coordinate incident response, and facilitate remediation. We also prioritize risks and maintain transparent communication with partners and the community regarding security issues. Arm is committed to maintaining industry-leading product security based on continuous improvement of our organisation's security posture through investments into culture and process.
Responsibilities:
* Handle suspected and confirmed vulnerabilities in Arm's portfolio of products using the established incident response process
* Support Arm's engineering teams with analysis of reported vulnerabilities, including impact and severity assessments
* Lead the development of Arm's vulnerability monitoring capabilities using internal and external sources
* Liaise with Arm's engineering teams to facilitate the responsible disclosure of product security vulnerabilities
* Engage with ecosystem peers across engineering and security teams to improve Arm's product security processes based on industry expectations
Required Skills and Experience :
* At least 2 years prior experience in a PSIRT or similar security function
* Bachelor's or higher in a related field or equivalent experience
* Excellent English written and verbal communication skills with a customer focus and ability to communicate vulnerabilities to a technical level
* Good understanding of software, hardware, network, and system security
* Understanding of common classes of vulnerabilities and attack methodologies
* Willingness to expand security knowledge into various product spaces
“Nice To Have” Skills and Experience :
* Experience with security research in products and applying that knowledge to product security incident response
* Experience in software vulnerability management and SDL practices
* Participation in working groups or similar with key bodies like FIRST, MITRE, CERT
* Experience with ticket management systems such as Jira
* Experience with incident management tooling
* Experience with scripting languages, such as Python
* Familiarity with Arm's technologies and/or semiconductors/firmware/compilers
In Return:
The Arm PSIRT is a growing and evolving team with senior management visibility and responsibility for critical business processes. Members will have opportunities to build internal and external connections, including with Arm's partners and collaborators.
#J-18808-Ljbffr