WHAT YOU DO AT AMD CHANGES EVERYTHING
At AMD, our mission is to build great products that accelerate next-generation computing experiences—from AI and data centers, to PCs, gaming and embedded systems. Grounded in a culture of innovation and collaboration, we believe real progress comes from bold ideas, human ingenuity and a shared passion to create something extraordinary. When you join AMD, you’ll discover the real differentiator is our culture. We push the limits of innovation to solve the world’s most important challenges—striving for execution excellence, while being direct, humble, collaborative, and inclusive of diverse perspectives.
The Role:
The AMD Product Security Office (PSO) is looking for an experienced offensive software security engineer to perform security research and validation of AMD products including EPYC server, Ryzen processor and GPUs. This role helps ensure AMD’s mission around security, software reliability and security assurance and provides technical and people leadership for a small team of security engineers.
The Person:
As a member of the Product Security Office (PSO) team you will focus on creative ways to analyze the security posture of AMD products. You will perform security assessments (Red Team) on AMD products, detecting and mitigating security vulnerabilities. You will help define and contribute to the research attack strategy and leverage internal and external tools like IDA, Ghidra, Kali Linux, Metasploit to discover vulnerabilities. You will implement proofs of concept to demonstrate impact of vulnerabilities and contribute to the design and implementation of fuzzing frameworks leveraged by various departments. Excellent communication, organization, prioritization, and the ability to learn new technologies and architectures are required.
Key Responsibilities:
- Collaborate with product owners within AMD to fully understand products and conduct security reviews to determine threat models and attack vectors.
- Work with software and hardware engineers to replicate development environments for security analysis.
- Perform vulnerability analysis, code review, static analysis, security testing/fuzzing, exploitation techniques and mitigations.
- Identify and exploit security vulnerabilities to help determine the security threat level.
- Develop an automated fuzzing framework for research, software and test groups to perform targeted adversarial security testing and validation.
- Document and present findings; work with leadership to create mitigation strategies and drive mitigations with product owners.
- Lead a team of software security engineers, setting technical direction and day-to-day priorities.
Preferred Experience:
- Minimum 5+ years of development in firmware, kernel, drivers.
- Minimum 2+ years performing penetration testing, secure code reviews and/or red team operations.
- Strong technical problem solving and programming skills in C/C++, Rust, and scripting languages like Python.
- Experience developing security testing tools and exploits.
- Experience with fuzzing frameworks.
- Experience with x86 or Arm architectures.
- Excellent verbal and written communication skills.
- Familiarity with security technologies and the semiconductor industry.
- Agile development experience.
Academic Credentials:
- Masters or Bachelor degree in Computer Engineering, Computer Science or Electrical Engineering.
#LI-CM1
#LI-HYBRID
Benefits offered are described: AMD benefits at a glance.
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.
This posting is for an existing vacancy.