Senior Product Security Engineer - Audio Tech

At Bose Corporation, we believe sound is the most powerful force on earth — and for over 60 years, we have been a company built on innovation, excellence, and independence. Privately owned, fiercely customer-focused, and driven by our values, we continue to lead industries and transform lives through sound. Today, Bose Corporation is entering an exciting new era. Across multiple global Business Units and Global Functions, we are shaping the future of audio technology, automotive, luxury, and premium experiences. We invite you to join us in this transformation. Job DescriptionJoin the future of product security at BoseAt Bose, security and stability are the two pillars of our product innovation. We are seeking a Security Engineer to support the product security initiatives of our growing Audio Technology business. You will play a central role in securing Bose's proprietary audio technologies. As Bose continues to innovate, there is a constant need to protect our intellectual property and embed security throughout the development lifecycle. The ideal candidate has extensive experience in secure software development within a fast-paced, agile product environment. Join our Product Security team to help power the next wave of innovation at Bose.Principal Duties and ResponsibilitiesAs a Security Engineer, you will work as an integral part of the Product Security team to embed security practices into every aspect of the secure development pipeline from concept through release of licensed IP. Our development philosophy is to enable developers to write secure code faster. Responsibilities for this job include:Architecting and implementing protections for intellectual property, including anti-reverse engineering, secure firmware distribution, and debug interface lockdownCollaborating with cross-functional teams including product firmware, Audio Technology, DevOps, cloud engineering, manufacturing, and program managementArchitecting and designing products to guarantee secure practices, data confidentiality, and system integrityEngineering and implementing ARM TrustZone secure applets, implementing a cryptographic IoT device identity and root of trustStreamlining secrets, key management, cryptography, and credential managementDefining security requirements and conducting security assessmentsImplementing firmware and intellectual property (IP) protection mechanisms to safeguard proprietary software and embedded technologiesPerforming obfuscation of firmware and algorithm binaries to protect against reverse engineering and unauthorized modificationIntegrating firmware encryption, digital signing, and integrity verification into embedded software and secure update processesEnsure compliance with applicable security regulations and standards (e.g., EU CRA, ETSI EN 303 645, NIST) and support audits and certificationsAdvising engineering peers on security matters in the form of architectural guidance, code/design reviews, and solution developmentImproving vulnerability discovery, patching processes, and leading responses to external security threatsPerforming security testing on products and supporting security fix implementationsDesigning and maintaining private X.509 and JWK chains of trust used for validating the authenticity of portable audio devicesStay up-to-date on security news, relevant technologies, user groups, industry trends, and emerging security opportunitiesBe a stakeholder on interdisciplinary teams advocating for securityQualificationsExperience delivering licensed software that runs on customer products and systems where you do not trust the system it runs on.Hands-on experience implementing firmware protection mechanisms, including secure boot, firmware encryption, digital signing, secure firmware distribution, and anti-tamper controlsExperience implementing binary obfuscation and anti-reverse engineering techniques for embedded firmware or proprietary algorithm binariesExperience implementing IP protection and anti-tamper mechanisms in embedded systems, including secure boot enforcement, firmware encryption, and hardware debug port protectionExperience developing for embedded systems and Linux platforms in C/C++.Strong knowledge of cryptographic theory and engineering, including encryption, hashing, signing, digital certificates, and hardware security modules (HSMs)Experience collaborating with cross-functional engineering teams to integrate security controls into embedded products throughout the development lifecycleBachelor's degree in Computer Science or equivalent. A master's degree is beneficial6 or more years of industry experience working in firmware development with a focus on security. An advanced degree can contribute toward experienceOptional Qualifications that would be Nice to HaveExperience aligning embedded product security practices with regulatory and compliance requirements (EU CRA, NIST, ISO 27001, IEC 62443, or similar frameworks)Building internal security applications with cryptographic guarantees such as firmware encryption and signing, custom developer enablement tools, secure asset provisioning, etcExperience developing for mobile applications (IOS or Android)Experience mitigating dependency or code-level defects including memory management issues, input validation, timing attacks, broken authentication, and side-channel attacksWhat you can expect at BoseWorking with wicked smart, super cool peopleA business commitment to security, stability, and qualityCompetitive salary, benefits, and pensionA culture of excellence, respect, opportunity and passion for innovationAt Bose, you're inspired to be and do your best and are rewarded for your unique talents! Our compensation is thoughtfully tailored to your skills, experience, education, and location, and goes beyond base salary. The hiring range for this position in the primary work location of Framingham, Massachusetts is: $123,500-$169,850.The hiring range for other Bose work locations may vary. In addition to competitive base pay we offer rewards including bonus programs, comprehensive health and welfare benefits, a 401(k) plan, plus exclusive perks designed to support your wellbeing, and a generous employee discount where you can immerse yourself in our products and experiences. We are a proudly independent company—driven by purpose, guided by our values, and united by a belief in the power of sound. As the world leader in audio experiences, we’re creating what’s next—pushing boundaries and delivering transformative sound experiences for people everywhere. Join us and make your next career move a mic-drop. Let’s Make Waves.‎ SummaryLocation: US, MA - FraminghamType: Full time