Sr. Product Security Incident Response Engineer

ADVANCE YOUR CAREER. ADVANCE THE WORLD.

At AMD, we believe technology has the power to solve the world’s most important challenges. From advancing healthcare and scientific discovery to powering AI and the technologies people rely on every day, innovation at AMD is shaping the future.

Whether you’re designing next-gen processors, enabling AI breakthroughs, or bringing leading edge products to market, every role at AMD contributes to something bigger - technology that moves the world forward. Join us and, together, we’ll advance your career.

THE ROLE:

AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs. The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners, with a growing focus on AI infrastructure and AI workloads.

THE PERSON:

To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response. You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels. You prioritize and balance multiple work streams on tight deadlines.

KEY RESPONSIBILITIES:

• Analyze security vulnerabilities and help define remediation strategies; assess, identify and communicate risks from security vulnerabilities to internal stakeholders, providing guidance regarding vulnerability response; communicate with customers and security researchers, and work cross-functionally with other internal stakeholder groups to drive resolution of security issues.
• Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners.
• Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products.
• Develop and implement a threat intelligence program.
• Provide recommendations for improving vulnerability management with an eye on automation, applying AI-assisted tooling to accelerate vulnerability triage, analysis, and response, and help establish how the team uses it.

PREFERRED EXPERIENCE:

The ideal candidate will have demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, GPU, SOC, or hardware security-oriented definition.

• Strong grasp of computer architecture, CPU and GPU/accelerator design, memory hierarchy and caches, and underlying hardware/firmware, including existing architectures (x86, ARM, and/or GPU/accelerator) and their security/virtualization extensions.
• Experience securing AI/ML workloads and GPU/accelerator stacks (e.g., ROCm) and their security requirements at datacenter scale.
• Familiarity with software/hardware interfaces and driver techniques.
• Proficient in C/C++, Rust, and Python, with understanding of assembly instruction sets (AMD64 or ARM).
• Experience designing and/or implementing secure systems-threat modeling, security architecture, protocol design, network security, and OS security.
• Familiarity with PC Client / Data Center / IoT interconnect standards and protocols: PCIe, CXL, Ethernet, RDMA, SPI, I2C/I3C, and USB.
• Quick to learn new concepts; strong teammate in cross-site, matrix environments.
• Solid grasp of security principles-confidentiality, integrity, availability, authentication, authorization, and auditing-plus cryptographic algorithms.
• Development experience with micro-kernels and/or real-time OSes.
• Familiarity with OS and virtualization tech-especially Linux kernel/driver development, hypervisors/VMs, and containers; SaaS/PaaS/IaaS and Kubernetes a plus.
• Demonstrated fluency with AI-assisted and agentic development tooling in real engineering work.

ACADEMIC CREDENTIALS:

• A degree in Computer Science, Electrical and Computer Engineering, or related subjects

This role is not eligible for visa sponsorship.

#LI-TB1

Benefits offered are described: AMD benefits at a glance.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.

This posting is for an existing vacancy.

THE ROLE:

AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs. The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners, with a growing focus on AI infrastructure and AI workloads.

THE PERSON:

To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response. You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels. You prioritize and balance multiple work streams on tight deadlines.

KEY RESPONSIBILITIES:

• Analyze security vulnerabilities and help define remediation strategies; assess, identify and communicate risks from security vulnerabilities to internal stakeholders, providing guidance regarding vulnerability response; communicate with customers and security researchers, and work cross-functionally with other internal stakeholder groups to drive resolution of security issues.
• Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners.
• Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products.
• Develop and implement a threat intelligence program.
• Provide recommendations for improving vulnerability management with an eye on automation, applying AI-assisted tooling to accelerate vulnerability triage, analysis, and response, and help establish how the team uses it.

PREFERRED EXPERIENCE:

The ideal candidate will have demonstrated experience in overall platform security and/or device security microarchitecture and/or CPU, GPU, SOC, or hardware security-oriented definition.

• Strong grasp of computer architecture, CPU and GPU/accelerator design, memory hierarchy and caches, and underlying hardware/firmware, including existing architectures (x86, ARM, and/or GPU/accelerator) and their security/virtualization extensions.
• Experience securing AI/ML workloads and GPU/accelerator stacks (e.g., ROCm) and their security requirements at datacenter scale.
• Familiarity with software/hardware interfaces and driver techniques.
• Proficient in C/C++, Rust, and Python, with understanding of assembly instruction sets (AMD64 or ARM).
• Experience designing and/or implementing secure systems-threat modeling, security architecture, protocol design, network security, and OS security.
• Familiarity with PC Client / Data Center / IoT interconnect standards and protocols: PCIe, CXL, Ethernet, RDMA, SPI, I2C/I3C, and USB.
• Quick to learn new concepts; strong teammate in cross-site, matrix environments.
• Solid grasp of security principles-confidentiality, integrity, availability, authentication, authorization, and auditing-plus cryptographic algorithms.
• Development experience with micro-kernels and/or real-time OSes.
• Familiarity with OS and virtualization tech-especially Linux kernel/driver development, hypervisors/VMs, and containers; SaaS/PaaS/IaaS and Kubernetes a plus.
• Demonstrated fluency with AI-assisted and agentic development tooling in real engineering work.

ACADEMIC CREDENTIALS:

• A degree in Computer Science, Electrical and Computer Engineering, or related subjects

This role is not eligible for visa sponsorship.

#LI-TB1

Benefits offered are described: AMD benefits at a glance.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.

AMD may use Artificial Intelligence to help screen, assess or select applicants for this position. AMD’s “Responsible AI Policy” is available here.

This posting is for an existing vacancy.