Staff Product Security Engineer

Requirements

  • Previous experience working in a PSIRT, vulnerability disclosure, or bug bounty triage role.
  • Working knowledge of CVE processes, vulnerability advisories, severity assessment, and remediation coordination.
  • Ability to communicate clearly with both technical and non-technical collaborators, working across different teams and priorities in time-sensitive situations.

Nice to Haves

  • Experience with hardware and/or software vulnerability handling.
  • Experience working with or supporting a bug bounty program.
  • Familiarity with performing vulnerability severity scoring such as CVSS.
  • Understanding of secure development practices, product security risk management, or security architecture.
  • Experience engaging with external researchers, customers, CERTs, CVE/CNA programs, or industry security communities.

What You'll Be Doing

  • Drive the triage, assessment, and resolution of product security vulnerabilities across Arm hardware and software.
  • Lead and coordinate product security incident response, working across engineering teams, business functions, customers, and industry partners.
  • Own coordinated vulnerability disclosure activities, including disclosure strategy, timelines, customer communications, CVE assignment, and security advisory publication.
  • Represent Arm in security engagements with researchers, customers, partners, and the wider security community.
  • Support and evolve Arm’s bug bounty programs, ensuring high-quality vulnerability assessment, researcher engagement, and effective internal coordination.
  • Strengthen Arm’s product security capability through continuous improvement of PSIRT processes, tooling, metrics, and incident response practices.
  • Safeguard the integrity and confidentiality of vulnerability handling, ensuring responses are accurate, timely, and aligned with industry best practice.

Perks and Benefits

  • Hybrid working environment supporting high performance and personal wellbeing with flexible patterns determined by teams.
  • Competitive salary range between £97,300 and £131,700 per year.
  • Inclusive and equal opportunity workplace committed to mutual respect and diversity.
  • Support for recruitment adjustments and accommodations to enable a fair hiring process.
  • Opportunity to work alongside exceptional engineers and researchers on technologies shaping the future of AI and computing.
AI Summary ✨

Similar jobs

  • Security Architect

    Flo HealthLondon, UK5 days ago
    Registered sponsor
    ≈ €120k – €156k / year base
  • Senior Product Security Engineer

    TrainlineLondon, UK5 days ago
    ≈ €108k – €120k / year base
  • Senior Detection Engineer

    Electronic ArtsGuildford, UK5 days ago
    Registered sponsor
  • Senior Product Security Engineer

    ArmCambridge, UK5 days ago
    Registered sponsor
  • See all jobs in UK →