Senior Security Firmware Engineer

Company Description Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we live in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and push possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry‑leading portfolio of products that are recognized globally for innovation, performance and quality. Job Description ESSENTIAL DUTIES AND RESPONSIBILITIES Development of various cryptography‑based security features such as data encryption, Secure Boot, and Device Attestation. Integrate these security protocols and features into the SSD data and control flows to ensure a robust and secure system, and investigate and resolve any security protocol compatibility issues that may arise. Investigate failures, document bug reports, and provide valuable assistance to product teams in identifying and resolving issues. Debug, optimize, and validate the firmware on SoC platforms, as well as bring up FPGA and ASIC. Contribute to the Security Development Lifecycle of the firmware by supporting its development at different stages, including design, threat analysis, implementation, validation, vulnerability testing, certification, and audit. Qualifications REQUIRED: A degree in Computer Science, Electrical/Computer Engineering, Software Engineering, or a related field. 3+ years of experience in embedded programming, with proficiency in C/C++ and one or more of the following: Python, Rust, Go. Strong understanding of microcontroller architectures and debugging of hardware/firmware issues. Experience in firmware code review, CI/CD test and validation methodology, as well as static and dynamic code analysis. Familiarity with the Agile software development process life cycle is also desired. Proficiency in failure analysis in debugging an embedded firmware application, using JTAG/debuggers such as Lauterbach. An engineer who can take ownership of given features and manage them from start to finish. Being self‑motivated and driven is essential for this role. Good communication skills and ability to work effectively with cross‑functional teams. What Sets You Apart Detailed knowledge of RISC‑V Instruction Set Architectures (ISA). Technical expertise in applied cryptography and firmware/hardware security, including knowledge of data encryption, trusted execution environment, secure boot, and device attestation. Knowledge of storage controller architectures and security protocols, such as TCG Opal/Ruby/Pyrite, IEEE 1667, SPDM, and IDE. Experience developing firmware on SoC platforms, running simulations, or bringing up FPGA and ASIC. Familiarity with writing code in GitHub repository and its CI/CD testing framework. Additional Information – Equal Opportunity Statement Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender identity, gender expression, age, national origin, sexual orientation, medical condition, marital status, physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. Harassment of any individual on any of the characteristics listed above is prohibited. Our non‑discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the Know Your Rights: Workplace Discrimination is Illegal poster. Our pay transparency policy is available here: . Compensation & Benefits Details Pay may be based on relevant education, qualifications, certifications, experience, skills, performance, contribution, results, geographic location, shift, internal and external equity, and business needs. Salary range is applicable for jobs performed in California, Colorado, New York or remote jobs that can be performed in those states; the range may be modified in the future. Eligibility to participate in Sandisk’s Short‑Term Incentive (STI) Plan and possible eligibility for the annual Long‑Term Incentive (LTI) program. Comprehensive benefits package including paid vacation, paid sick leave, medical/dental/vision insurance, life, accident and disability insurance, flexible spending and health savings accounts, employee assistance program, supplemental life and AD&D, legal plan, pet insurance, critical illness, airport indemnity, tuition reimbursement, transit, Applause Program, employee stock purchase plan, and Sandisk’s Savings 401(k) Plan. Pay, bonuses, and other compensation are subject to company discretion and may be modified at the Company’s sole discretion in accordance with law. Application Deadline We anticipate that the application deadline will be 11/11/2025, although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. #J-18808-Ljbffr 6AM City, LLC