Firmware Security Principal Engineer

Firmware Security Principal Engineer — Product Security is a fast-paced role at the intersection of firmware engineering and product security. Our team owns the security posture of the firmware stack on Dell Networking switch products — Diags, ONIE, BIOS and BMC — from threat modeling and secure design through vulnerability response and regulatory compliance. We work directly with silicon and BIOS vendors, ODM partners, Dell PSIRT and external security researchers to identify, assess and remediate firmware-level vulnerabilities across the full product lifecycle. Join us to do the best work of your career and make a profound social impact as a Principal Systems Development Engineer on our Networking System Development Engineering Team in Taipei, Taiwan . What you’ll achieve As a Firmware Security Principal Engineer focused on product security, you will own the firmware security strategy for Dell Networking switch platforms, driving secure design, vulnerability remediation and compliance readiness across Diags, ONIE, BIOS and BMC. You will: •Lead threat modeling and secure design review for Diags, ONIE, BIOS and BMC on networking switch products, and define the platform root-of-trust and secure boot architecture •Own the firmware vulnerability response lifecycle — triage security findings from PSIRT, SAST/DAST tooling, external researchers and upstream vendor advisories (Intel IPU, AMI, Broadcom); assess exploitability and platform impact; and drive remediation into the firmware release cadence •Define and drive the firmware security release strategy, including severity-based prioritization, out-of-band release criteria, and alignment with product and program teams •Act as the primary technical interface to BIOS and BMC vendors on security defects, patch integration and advisory alignment •Establish and maintain secure development practices across the firmware codebase — including static analysis, SBOM generation, dependency and OSS vulnerability management, and signing key governance •Drive regulatory and standards compliance for firmware, including EU Cyber Resilience Act (CRA), NIST SP 800-193 platform firmware resiliency, and Secure Boot requirements •Contribute to the development and implementation of security test strategies and penetration test plans for Diags, ONIE and BIOS •Mentor engineering teams on secure coding practices and serve as the Security Champion for the networking firmware organization Essential Requirements 12+ years of related experience in a professional role with a Bachelor’s degree; or 10+ years with a Master’s degree of experience, with substantial depth in firmware security on Diags, ONIE, BIOS or BMC for networking or server platforms Deep knowledge of platform firmware security architecture — UEFI Secure Boot, measured boot, hardware root of trust (Intel Boot Guard, BMC-based RoT), SPI flash protection, signed firmware update and anti-rollback mechanisms Proven ability to analyze and remediate vulnerabilities in SMM handlers, DXE/PEI drivers and the UEFI network stack Demonstrated experience in vulnerability analysis and secure code review in C — memory safety defects, input validation, privilege boundary violations and cryptographic misuse Working knowledge of CVE/CWE taxonomy, CVSS scoring, and coordinated vulnerability disclosure and embargo processes Hands-on experience with static and dynamic analysis tooling (Coverity, Black Duck, SAST/DAST), and the ability to distinguish genuine findings from false positives at scale Experience managing security dependencies and advisories from upstream silicon and BIOS vendors, and driving patch integration into a release pipeline Ability to manage, motivate and direct a cross-functional workgroup across engineering, PSIRT, program management and external vendors; and drive successful negotiations Ability to code/debug and guide others to code/debug flexible, scalable and complex programs, using either written or verbal design specifications Excellent knowledge and application of engineering concepts along with effective problem-solving ability Desirable Requirements Bachelor’s or master’s degree in computer science or related field Security certifications such as CISSP, OSCP, GPEN or GICSP Knowledge or relevant deployment experience of the Networking Switch ecosystem, including 100G/400G/800G/1.6T platforms Experience with EU CRA, NIST SP 800-193, FIPS 140-3 or Common Criteria compliance programs Familiarity with SBOM standards (SPDX, CycloneDX) and OSS license/vulnerability management Show more Show less