Embedded Product Security Architect

Company Description

At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.

At our core, Western Digital is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that. Our technology helped people put a man on the moon.

We are a key partner to some of the largest and highest growth organizations in the world. From energizing the most competitive gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

Binge-watch any shows, use social media or shop online lately? You’ll find Western Digital supporting the storage infrastructure behind many of these platforms. And, that flash memory card that captures and preserves your most precious moments? That’s us, too.

We offer an expansive portfolio of technologies, storage devices and platforms for business and consumers alike. Our data-centric solutions are comprised of the Western Digital®, G-Technology™, SanDisk® and WD® brands.

Today’s exceptional challenges require your unique skills. It’s You & Western Digital. Together, we’re the next BIG thing in data.

Job Description

Western Digital’s Security Platform team is looking for an enthusiastic product security architect to lead the security architecture function for the Flash business unit’s product portfolio. The security architecture team will be responsible for specifying the security solutions for Flash’s various product lines including enterprise, client, retail, mobile and automotive.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Interface with ecosystem, product security assurance (PSA) and product teams to gather security requirements from customers, regulatory, compliance, risk, and industry trends.

Define the roadmap for security architecture for Flash products, including firmware and hardware, and secure manufacturing infrastructure.

Drive threat modeling and reference embedded security architectures for product lines and drive BU wide adoption.

Architect interactions between various system components and peripherals.

Contribute to requirements and strategy for verification and validation of security features.

Lead internal security reviews of developed products (HW and/or embedded SW), and guide external evaluations and compliance activities.

Collaborate with multi-functional teams, including hardware design, firmware development, and product security assurance, to ensure that security requirements are incorporated into product design and development processes.

Follow and promote a secure design mindset from conception to productization across multiple projects and product lines.

Keep abreast of emerging industry security standards and best practices to guide the team to raise the bar on security.

Qualifications

REQUIRED QUALIFICATIONS: 

Master/PhD degree in electrical engineering, computer science, or a related field, preferably with a specialization in embedded security (HW and/or SW)

10+ years of experience in embedded product security.

Expert understanding of practical modern cryptography

Proficient in security protocols, cryptography, authentication, attestation, authorization, secure boot, secure communication, digital signatures, certificates and post-quantum cryptography.

Experience providing technical leadership and mentoring to other architects and/or development teams.

Experience in driving FIPS, Common Criteria certification is an asset.

Solid understanding of creating and validating threat models.

Knowledge of data storage controllers' architectures, ARM TrustZone, and RISC-V, is an asset.

Strong analytical, problem solving and creative thinking skills.

Strong commitment to technical quality and proper documentation during all phases of design and development.

Excellent communication skills; interact with suppliers, senior management, and other team members professionally, in writing, in person, and virtually, as necessary.

Additional Information

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical conditi