Senior Firmware Security Engineer

At Cornelis we’re building the future of AI and HPC networking with an AI-first approach to silicon and software development. We’re seeking engineers who are energized by working on cutting-edge ASIC design and distributed software systems, and who are motivated to push the boundaries on how AI can transform everything from chip architecture to system performance at scale. Cornelis Networks delivers the world’s highest performance scale-out networking solutions for AI and HPC datacenters. Our differentiated architecture seamlessly integrates hardware, software and system level technologies to maximize the efficiency of GPU, CPU and accelerator-based compute clusters at any scale. Our solutions drive breakthroughs in AI & HPC workloads, empowering our customers to push the boundaries of innovation. Backed by top-tier venture capital and strategic investors, we are committed to innovation, performance and scalability - solving the world’s most demanding computational challenges with our next-generation networking solutions. We are a fast-growing, forward-thinking team of architects, engineers, and business professionals with a proven track record of building successful products and companies. As a global organization, our team spans multiple U.S. states and six countries, and we continue to expand with exceptional talent in onsite, hybrid, and fully remote roles . As a Senior Firmware Security Engineer, you will design and deliver security-critical firmware for advanced networking hardware. This is a hands-on role with leadership expectations: approximately 70% individual contributor and 30% technical mentorship/leadership. You will work across secure boot, firmware signing, and cryptographic protocol implementation on embedded platforms (ARM, RISC-V, and custom ASIC environments), partnering closely with silicon, platform, and validation teams. Key Responsibilities: Design, implement, and maintain firmware in C/C++ with automation/tooling in Python. Build and harden secure boot and chain-of-trust mechanisms. Own and improve firmware signing and image authentication workflows. Implement and integrate cryptographic protocols for device trust and secure communications. Perform threat modeling, security design reviews, and vulnerability remediation for firmware components. Define and execute firmware security validation strategies (negative testing, robustness, tamper scenarios). Mentor engineers through code reviews, design guidance, and secure development best practices. Collaborate cross-functionally with architecture, hardware, and software teams to deliver secure product releases. Minimum Qualifications: 7+ years of embedded/firmware software engineering experience, including security-focused development. Bachelor’s or Master’s degree in Computer Engineering , Electrical Engineering, Computer Science, or equivalent experience. Strong proficiency in C/C++ and practical proficiency in Python. Proven experience with: Secure boot Firmware signing / image authentication Applied cryptography in embedded systems Experience on one or more target architectures: ARM, RISC-V, or custom ASIC/SoC platforms. Strong debugging and root-cause skills for low-level systems. Ability to lead technically while remaining deeply hands-on. Preferred Qualifications: Experience in high-performance networking, interconnects, or data center/HPC systems. Familiarity with device attestation and management security standards (e.g., SPDM/PLDM concepts). Experience building secure firmware delivery/update pipelines and release validation frameworks. Knowledge of security compliance frameworks and secure SDLC practices for embedded products. Familiarity with Post-Quantum Cryptography (PQC) and NIST PQC standards (e.g., ML-DSA/ Dilithium , ML-KEM/Kyber), including hybrid classical+PQC signing and key exchange in embedded contexts. Location: This is a remote position for employees residing within the United States. We offer a competitive compensation package that includes equity, cash, and incentives, along with health and retirement benefits. Our dynamic, flexible work environment provides the opportunity to collaborate with some of the most influential names in the semiconductor industry. At Cornelis Networks your base salary is only one component of your comprehensive total rewards package. Your base pay will be determined by factors such as your skills, qualifications, experience, and location relative to the hiring range for the position. Depending on your role, you may also be eligible for performance-based incentives, including an annual bonus or sales incentives. In addition to your base pay, you’ll have access to a broad range of benefits, including medical, dental, and vision coverage, as well as disability and life insurance, a dependent care flexible spending account, accidental injury insurance, and pet insurance. We also offer generous paid holidays, 401(k) with company match, and Open Time Off (OTO) for regular full-time exempt employees. Other paid time off benefits include sick time, bonding leave, and pregnancy disability leave. Cornelis Networks does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. Cornelis Networks is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.