Silicon Security Engineer

Project

Work done for a product or program.

• Define the silicon threat model and security requirements.
• Review RTL and architecture for root of trust, key management and isolation.
• Plan fault injection and side-channel testing on first silicon.
• Specify secure boot, attestation and debug-lock behaviour.
• Coordinate security reviews with the design partner.
• Triage and fix security vulnerabilities found in silicon or firmware.
• Support certification and customer security assurance requests.

Function

Work that keeps the discipline running: methods, tools, suppliers and people.

• Maintain the policies, processes and tools of the function.General
• Keep the function compliant with legal, financial and regulatory requirements.General
• Report the function's performance and improve it over time.General

Project

1. Produce and hand over the role's key deliverables
   • Silicon threat model
   • Security architecture specification
   • Pen-test and fault-injection report
   • Security sign-off for tape-out
2. Support programsGeneral
   • Agree what each program needs
   • Deliver in time for milestones
3. Manage issuesGeneral
   • Track requests to closure
   • Escalate risks

Function

1. Run the functionGeneral
   • Maintain policies and processes
   • Keep records and controls
2. ImproveGeneral
   • Report performance
   • Lead improvement work