Job Description

Sandisk’s Product Security Engineering & Assurance (PSEA) organization is seeking a highly motivated Product Security Engineer – Hardware/Firmware & Adversarial Security Engineering to strengthen the security of our storage products.

This is a hands-on technical security role combining product security engineering, embedded/firmware security, and adversarial security engineering. The engineer will work closely with firmware, hardware, Platform Security, validation, and product teams to identify attack paths, evaluate security controls, validate vulnerabilities, and drive practical security improvements.

The role will also help develop AI-assisted and agentic security engineering capabilities that combine LLMs, security tools, automation, and human expertise to improve the scale and depth of product security analysis.

Key Responsibilities

Product & Firmware Security

- Assess hardware and firmware architectures from both defensive and attacker perspectives.
- Perform threat modeling and security risk assessments across embedded-system architectures.
- Evaluate security mechanisms including secure boot, roots of trust, firmware update and recovery, cryptography and key management, authentication, anti-rollback, provisioning, lifecycle controls, and debug/manufacturing interfaces.
- Identify attack paths and control gaps and work with engineering teams to develop practical mitigations.
- Support security readiness assessments and review security evidence including static analysis, SBOM/dependency analysis, fuzzing, penetration testing, and security validation results.

Adversarial Security Engineering





- Perform hands-on adversarial assessments of firmware and embedded products.
- Conduct firmware extraction, binary analysis, reverse engineering, vulnerability research, fuzzing, and runtime analysis.
- Analyze boot flows, firmware update mechanisms, trust boundaries, device interfaces, and security-critical components.
- Develop and validate attack hypotheses and proof-of-concept techniques to determine realistic exploitability.
- Analyze interfaces such as JTAG, UART, SPI, PCIe, and NVMe where applicable.
- Correlate findings across static analysis, reverse engineering, fuzzing, runtime analysis, and architecture review to identify multi-stage attack chains.
- Develop reusable adversarial testing tools, automation, and security playbooks.

AI-Assisted & Agentic Security Engineering

- Develop AI-assisted workflows for firmware analysis, threat modeling, vulnerability discovery, fuzzing, and security triage.
- Integrate LLMs with security tools, APIs, scripts, and analysis systems to automate security engineering workflows.
- Develop agentic workflows capable of invoking tools, analyzing results, developing attack hypotheses, and recommending subsequent testing.
- Ensure AI-generated security findings are validated through reproducible technical testing and appropriate human review.

PSIRT & Vulnerability Management

- Support PSIRT activities including vulnerability triage, technical investigation, CVSS assessment, remediation, and coordinated vulnerability response.
- Reproduce and validate externally reported or internally discovered vulnerabilities.
- Translate vulnerability findings into durable improvements to product architecture and development practices.

📌 Staff Product Security Engineer (Bengaluru)
🏢 Sandisk
📍 Bengaluru