# Technical Leader- Platform Security

**Company**: Cisco
**Location**: Milpitas, California
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $186,900.00 - $267,700.00
**Category**: Security
**Industry**: Technology

**Apply**: https://cisco.wd5.myworkdayjobs.com/en-US/Cisco_Careers/job/Milpitas-California-US/Technical-Leader--Platform-Security_2026165?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_1090a5cd-e8c

## Description

Our Platform Security team is at the heart of protecting the infrastructure that powers the internet.

As a Technical Leader, you will serve as the primary authority on platform security, steering the architecture, development, and integration of robust security solutions.

**Responsibilities**

- Define comprehensive platform security strategies, including Root of Trust, Secure/Measured Boot, attestation, firmware integrity, and key lifecycle management.

- Drive the implementation of UEFI Secure Boot (PK, KEK, db, dbx), including enrollment, rotation, revocation, and debug processes.

- Integrate security protocols into Linux and SONiC environments, focusing on ONIE, kernel integrity, driver security, and firmware update mechanisms.

- Define and manage manufacturing and field provisioning of keys and certificates to ensure platform identity.

- Conduct thorough platform threat modeling, lead security reviews, and provide mentorship to engineering teams across hardware, firmware, and software domains.

**Minimum Qualifications**

- Bachelor’s degree with 8 years of related experience, or Master’s degree with 6 years of related experience, or PhD with 3 years of related experience.

- Minimum 5 years of experience in C/C++ and Python/shell, with demonstrated ability to debug across firmware, Linux, and hardware layers.

- Minimum 8 years of experience in platform, firmware, or system security.

- Minimum 5 years of specific expertise in UEFI Secure Boot, Linux boot/kernel architectures, and hardware Root of Trust (TPM or equivalent).

- 8 years of strong Linux system expertise, covering boot processes, kernels, drivers, and firmware interfaces within SONiC or similar networking operating systems.

**Preferred Qualifications**

- Experience with OpenBMC, Caliptra/DICE, or PKI/X.509 standards.

- Proficiency in kernel/module signing and working with NPU platforms.

- Familiarity with FIPS/Common Criteria compliance or relevant open-source security contributions.

The starting salary range posted for this position is $186,900.00 to $267,700.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.

## Skills

### Required
- C/C++
- Python/shell
- UEFI Secure Boot
- Linux boot/kernel architectures
- hardware Root of Trust (TPM or equivalent)
- Linux system expertise

### Nice to have
- OpenBMC
- Caliptra/DICE
- PKI/X.509 standards
- kernel/module signing
- NPU platforms
- FIPS/Common Criteria compliance

---

Source: [Apply at cisco.wd5.myworkdayjobs.com](https://cisco.wd5.myworkdayjobs.com/en-US/Cisco_Careers/job/Milpitas-California-US/Technical-Leader--Platform-Security_2026165?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)