Embedded Security Engineer

Broadcom’s Infrastructure and Networking Group seeks an embedded security engineer to build trusted firmware foundations for next-generation switch, NIC, and storage controller SoCs. You will architect and implement secure boot chains, attestation protocols, key management subsystems, and runtime integrity monitors running on ARM Cortex-A cores under embedded Linux. The work spans low-level hardware abstraction layers through to OS-level security services.

Partner with silicon design teams in San Jose to influence security IP blocks including cryptographic engines, secure enclaves, and tamper detection. You will also develop in Rust for memory-critical security components, leveraging its safety guarantees to eliminate entire classes of vulnerabilities in the trusted codebase. Cross-functional collaboration with platform software, validation, and product security teams is a core part of the role.

Broadcom offers a fast-paced, high-impact environment where your work ships in millions of enterprise-grade products. Candidates should have 8+ years of embedded experience, expertise in ARM TrustZone or similar TEE technologies, and a track record of shipping secure firmware in networking or semiconductor contexts. Experience with PCIe subsystem firmware and side-channel mitigation is a strong plus.

• RSU equity grants
• Health, dental, and vision
• On-site fitness center and cafeteria
• 401(k) with company match