Staff Software Engineer - AI Accelerator Card Security Engineer - Cork, Ireland

Company:

Job Area:

General Summary:

Qualcomm Technology Inc.’s Dragonfly AI accelerator cards provide the backbone of an enhanced AI experience by shifting the AI workloads away from generic processors and onto specialized NPU cores that provide faster execution times, shorter latencies, and lower power consumption. These accelerators bear the responsibility of processing valuable user and model data - meaning that security is a critical product requirement that must be achieved to guarantee the products’ success in the market.

We are seeking a talented security engineer to join the Dragonfly security team to ensure that the components of the Dragonfly AI accelerator card meet the security requirements and are securely configured and provisioned.

You will determine the appropriate security requirements for the components on an AI accelerator card; evaluate third-party components; determine appropriate strategies for provisioning security information to the devices; and work with our partners to ensure that these strategies are implemented.

Responsibilities:

In this role, you will be responsible for ensuring that the components and software on the Dragonfly AI accelerator cards meet security requirements, and are securely configured and provisioned:

• Define and document the security requirements for components on an AI Accelerator card.

• Define and document the mechanisms used for secure communication between the Board Management Controller (BMC) and the platform-management services, including relevant Redfish, SPDM-based, and PLDM-based interactions.

• Define and document processes to establish the device identity, collect measurements, generate evidence, and verify that evidence that allow a Platform Root of Trust (PRoT) to attest the state of the AI accelerator card to a management service through the BMC.

• Represent the Dragonfly security team in relevant customer, vendor, and standards forums, especially forums related to the use, development, and interoperability of attestation protocols.

• Evaluate components for their ability to meet the security requirements and work with vendors to improve components that do not meet the relevant requirements.

• Design and document services for device-personalization and provisioning of keys, certificates, identities, and configuration data in factory environments.

• Design and document test plans and production-line validation systems to verify that identities, keys, certificates, and secure configuration data have been provisioned correctly to devices in the factory environment.

The role combines security architecture and requirements development with hands-on prototyping, implementation review, automation, and validation.

Critical Skills:

The successful candidate will have the following skills:

• A Bachelor's degree in Engineering, Information Systems, Computer Science, or related field, and 7+ years of experience in product security or a related field. Work experience gained by successfully completing a Master’s or Doctoral degree will be taken into consideration.

• An understanding of the security relevance of the physical components that exist on an AI accelerator card (such as the BMC, the PRoT, flash devices, and PCIe switches, including the use of ACS).

• An understanding of the principles of key management and certificate management.

• An understanding of the principles of the security lifecycle of devices, root-of-trust security, boot-chain security, and firmware authentication.

• Experience in performing security risk assessments on systems of discrete components.

• Experience in drafting security specifications and reviewing systems to determine if they meet those specifications.

• Proficiency in the security review of firmware and software that executes on the physical components on an AI accelerator card written in the C programming language.

• Proficiency in the use of the Python programming language with experience in developing provisioning utilities, test automation, and protocol-validation tools.

• Excellent written and verbal communication skills.

Preferred Skills:

A preferred candidate will have the following addition skills:

• A Master’s degree with a security specialization in Engineering, Information Systems, Computer Science, or related field.

• Understanding of the principles of secure debug and RMA flows.

• Understanding of the MCTP, SPDM, PLDM, and Redfish protocols.

• Experience in designing security provisioning protocols in a factory setting.

• Experience in designing security systems for attestation of devices, including an understanding of the role of post-quantum cryptography in the security of attestation protocols.

• Experience in implementing the specifications of the Open Compute Project (OCP), the Confidential Computing Consortium (CCC), and the IETF RATS working group (such as the EAT token format).

• Experience in the development of AI accelerator systems.

• Proficiency in the C programming languages with experience in developing systems for provisioning keys, certificates, and secure configuration data.

Where you will be working

Cork has a proud reputation as Ireland's second largest economic engine and is now one of the Top 20 location choices in Europe with 39,000 people being employed by over 170 overseas companies.

There's a growing diversity in the region with people from many nationalities relocating to Cork, relishing the opportunity to work and live in a location that offers an excellent quality of life.

A gateway to Europe, Cork airport provides access to almost 50 international destinations including transatlantic air routes.

Equal Opportunities

We are an Equal Opportunity employer; all qualified applicants will receive consideration for employment without regard to race, colour, religion, sexual orientation, gender identity, national origin, disability, veteran status, or any protected classification.

What's on Offer

Apart from working in an open, relaxed and collaborative space, you will enjoy:

• Salary, stock and performance related bonus

• Maternity/Paternity Leave

• Employee stock purchase scheme

• Matching pension scheme

• Education Assistance

• Relocation and immigration support (if needed)

• Life, Medical, Income and Travel Insurance

• Subsidised memberships for physical and mental well-being

• Bicycle purchase scheme

• Employee run clubs, including, running, football, chess, badminton + many more

Minimum Qualifications:

OR

Master's degree in Engineering, Information Systems, Computer Science, or related field and 3+ years of Software Engineering or related work experience.

OR

PhD in Engineering, Information Systems, Computer Science, or related field and 2+ years of Software Engineering or related work experience.

• 2+ years of work experience with Programming Language such as C, C++, Java, Python, etc.

*References to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies.

Qualcomm is an equal opportunity employer. If you are an individual with a disability and need an accommodation during the application/hiring process, rest assured that Qualcomm is committed to providing an accessible process. You may e-mail [email protected] or call Qualcomm's toll-free number found here. Upon request, Qualcomm will provide reasonable accommodations to support individuals with disabilities to be able participate in the hiring process. Qualcomm is also committed to making our workplace accessible for individuals with disabilities. (Keep in mind that this email address is used to provide reasonable accommodations for individuals with disabilities. We will not respond here to requests for updates on applications or resume inquiries).

Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.

To all Staffing and Recruiting Agencies:Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.

If you would like more information about this role, please contact Qualcomm Careers.