Staff Product Security Engineer
Core
Lead triage, assessment, and resolution of security vulnerabilities across Arm hardware and software; coordinate incident response and responsible disclosure.
Role type
Staff Product Security Engineer (PSIRT)
Builds
Coordinated vulnerability disclosure activities, security advisories, and bug bounty program effectiveness
Domain
Semiconductor / Hardware and Software Security
Required skills
Vulnerability triage, CVE processes, severity assessment, remediation coordination, incident response leadership, responsible disclosure strategy, bug bounty program management, cross-functional coordination
Preferred skills
Hardware/software vulnerability handling, CVSS scoring, secure development practices, security architecture, engagement with external researchers and CERTs
Technologies
CVE, CVSS, Bug Bounty Platforms
Responsibilities
Drive triage and resolution of product security vulnerabilities; Lead and coordinate product security incident response; Own coordinated vulnerability disclosure activities; Represent Arm in security engagements with researchers and partners; Support and evolve PSIRT processes and tooling; Safeguard integrity and confidentiality of vulnerability handling
Seniority
Staff, hands-on IC with strategic coordination
