Job Details:

Job Description: 

The Core Graphics and AI IP organization is responsible for delivering industry-leading GPU IP (3D, media, display, compute) to all of Intel's business units and their market segments, including for the client, high-performance computing and AI, and edge computing. Core Graphics and AI IP is also responsible for the development of specialized IP for the NPU (neural processing unit) and AI model deployment across Intel's hardware for the AI PC. Additionally, all aspects of client graphics engineering and management of the Intel Arc graphics portfolio and business is included within the purview of Core Graphics and AI IP.

Embedded within CGAI, the Graphics Security Research team is responsible for developing custom tools and capabilities to uncover security vulnerabilities and to work with the various development teams on mitigating internally as well as externally found security vulnerabilities. Our team works across many domains, supporting both integrated as well as discrete graphics, Windows and Linux, HW/SW/FW for all the vertical components (media, 3d, compute, display, kmd).

As a Security researcher within the CGAI Security team, you will be responsible for offensively identifying security vulnerabilities on Intel Graphics in Windows and Linux spanning across client/server/embedded market segments. Understanding and incorporating external findings from external researchers, research papers and prominent conferences to maintain security within our organization. While our team works on both HW and SW, the ideal candidate has a strong HW background.

The responsibilities will include but not be limited to:

• Defining and implementing strategy for ensuring platform level security vulnerabilities are mitigated across Software/Silicon/Board level attacks.
• Performing architectural reviews on new features and defining test strategy for various penetration attacks/security validation plans.
• Developing proof of concept tests/attacks in both pre-silicon RTL environments and post-silicon environments to verify issues and validate fixes.
• Develop custom fuzzers/harnesses to execute in pre-silicon simulation.
• Influence the architecture and design of Intel graphics driver to meet secure development life-cycle best practices.
• Planning and scheduling daily tasks and using judgment on a variety of problems requiring deviation from standard practices.
• Developing tools and driving automation for custom security research activities and streamlining our existing SDL process.
• Define and track team key indicators of success and link to the Intel graphics driver secure development best practices.

The ideal candidate will exhibit the following:

• Ability to anticipate graphics, media, display and compute industry threats and incorporate feedback to improve secure architecture and design of the graphics driver as well as the underlying hardware.
• Familiarity in modern research techniques
• Ability to handle multiple tasks simultaneously.
• Comfortable collaborating across multiple geographical locations.
• High attention to detail.
• Excellent communication/presentation skills.

Qualifications:

You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.

Minimum qualifications:

The candidate must possess one of the following:

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or related discipline with at least 6 years in development/validation/security.
• OR Master's degree in Computer Science, Computer Engineering, Electrical Engineering or related discipline with at least 5 years in development/validation/security.

• Your experience should be in the following:
  • Deep Experience on security analysis industry best practices for HW/SW/FW.
  • Experience with RTL, Verilog, System Verilog, VCS, Simics.
  • Experience on threat modeling and security validation techniques, including and not limited to secure code reviews, fuzzing and p