Principal Security Engineer, SSD Firmware Test

About the role

Micron is looking for a Staff / Principal Security Engineer to lead security validation of SSD firmware. The role defines and owns end-to-end security validation strategies across SSD product lifecycles, from development and qualification through release and sustaining, and mentors engineers in security validation methodologies.

Key responsibilities

• Define and own end-to-end security validation strategies across SSD product lifecycles, including development, qualification, release and sustaining activities.
• Architect and maintain scalable security validation frameworks for current and next-generation SSD firmware platforms.
• Lead root cause analysis of security-related failures, customer escalations, qualification issues and field escapes, driving corrective and preventive actions.
• Drive security test automation roadmaps, regression infrastructure and validation tool development to improve coverage and efficiency.
• Work with firmware and system architects and development teams on secure design reviews, threat modeling and security-focused code reviews.
• Assess and communicate security risks, validation coverage gaps and mitigation strategies to stakeholders and leadership.
• Mentor engineers and influence security validation standards, best practices and qualification readiness across multiple SSD product generations.
• Present technical findings, project risks and validation status updates to cross-functional and leadership teams.

Required profile

• B.Sc. or higher in Electrical Engineering, Computer Engineering, Computer Science or equivalent.
• Over 6 years of experience in SSD firmware testing, firmware development, security validation or related storage technologies.
• Demonstrated experience leading security validation strategies and qualification activities across multiple SSD product generations.
• Preferred: industry contributions through publications, patents or standards organization participation, and responsible use of AI-enabled tools.

Required skills

• SSD security architecture, PCIe/NVMe protocols and storage security technologies.
• TCG Opal, NVMe Security, SPDM, Secure Boot, cryptography, FIPS, hardware Root of Trust and key management.
• Embedded firmware systems, Python-based test automation and validation framework development.
• Security validation, threat assessment, root cause analysis and regression test infrastructure.