Principal Product Security Architect

About the role

Arm is looking for a Principal Product Security Architect to lead interactions with external security laboratories and certification bodies. You will be a senior member of the Product Security team, driving security evaluations, certification programs, and ensuring our products meet industry‑standard methodologies and regulatory requirements.

Key responsibilities

• Act as the primary technical liaison with accredited third‑party security labs evaluating Arm products.
• Lead end‑to‑end security evaluation and certification programs, including planning, execution, documentation, and closure.
• Ensure all evidence, test vectors, and artefacts required for certification are accurate, complete, and delivered on schedule.
• Review and validate lab findings, oversee corrective actions, and manage retesting.
• Maintain up‑to‑date knowledge of certification standards such as Common Criteria, PSA Certified, SESIP, FIPS, ISO 21434, IEC 62443, etc.
• Document evaluation processes and certification workflows clearly and comprehensively.
• Provide internal guidance and mentoring on evaluation methodologies and certification readiness.

Required profile

• 10+ years of experience in product security, security evaluation, or certification.
• Proven experience collaborating with external security laboratories and navigating formal evaluation processes.
• Strong understanding of cryptographic primitives, secure key lifecycle management, and secure provisioning workflows.
• Experience with silicon/SoC security architecture, threat modelling, attacker models, and countermeasures.
• Excellent organizational, communication, and documentation skills.

Required skills

• Common Criteria, SESIP, PSA Certified, FIPS 140‑3, ISO 21434, EU‑CRA.
• Cryptographic primitives and secure key management.
• Silicon/SoC security architecture, threat modelling, attacker modelling.
• Secure hardware components (cryptography accelerators, RoT modules, secure enclaves, HSMs, TEE/TF‑M).
• Secure firmware components (secure boot ROM, bootloader, TFM/TFA, OP‑TEE, hypervisor).
• Side‑channel analysis, fault‑injection testing, hardware penetration testing.

What we offer

• Relocation package including visa sponsorship support.