Senior Firmware Security Engineer
San Francisco, CA

Job Description

Meraki Software Engineers breathe life into our cloud-managed networking devices, which range from enterprise grade switches and routers to wireless access points and security cameras. We are driven by the desire to make managing sophisticated networks simple. Our firmware combined with a web-based dashboard allows customers to manage enterprise scale networks using a simple point and click interface. With this one of a kind solution customers can monitor, reconfigure, and update any Meraki node, or thousands of nodes, anywhere on their network from anywhere in the world. It also allows Meraki to rapidly detect, diagnose, and correct problems in the customer's network, sometimes even before they know there is a problem.

We are passionate about building real products that our customers love. As a member of our firmware security team, you will have a substantial impact on the security of millions of Meraki users all around the world. Our device firmware is built on Linux and open-source software. We work individually and in small teams to release several new products each year.

We believe in fostering a positive culture by hiring, coaching, and empowering smart, helpful, humble people. We maintain a positive relationship with Cisco that gives us the stability and resources of a larger company without sacrificing our startup vibe-including an awesome office overlooking the Bay Bridge and stocked full of food and drinks.

As a Senior Firmware Security Engineer you will:

* Collaborate with software engineers to design, review, and develop solutions that give our customers optimal and secure solutions
* Collaborate with hardware engineers on security features such as secure boot, cryptographic accelerators, and tamper protection features
* Look for and help fix vulnerabilities in existing and new products
* Evaluate, triage and develop patches for firmware vulnerabilities
* Perform security architecture and design review of new products and features
* Review source code for security flaws
* Integrate cryptographic algorithms with network protocols
* Validate and optimize our cryptographic solutions
* Collaborate with Software Engineers across product teams to continually add security refinements to our firmware design, development, and deployment practices.

You are an ideal fit for this role if you:

* Have 3+ years professional experience programming in C or C++
* Have expert knowledge of embedded systems development concepts, including cross-platform development and build tools (GNU toolchain, OpenWRT, buildroot, Yocto), bootloaders (U-Boot, coreboot, UEFI), kernel configuration, device drivers, device trees
* Are delighted to break things in order to uncover security vulnerabilities

Bonus points for:

* Networking knowledge, especially SSL/TLS security architecture and details
* Experience with security and cryptography fundamentals, Secure Boot, or Trusted Platform Modules (TPM)
* Experience writing device drivers for any Operating System
* Know common bus protocols like PCI, I2C, SPI, and LPC
* Are comfortable using source-level debuggers, hardware/JTAG debuggers, network protocol analyzers, or logic analyzers to diagnose problems at all layers of the system
* Have experience reading schematics and data sheets
* Experience with fuzzing, penetration testing, or static analysis

Cisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.