Principal Product Security Architect

Principal Product Security Architect Overview

Arm is looking for a highly experienced security professional to take on a senior role focused on product security evaluation and certification. In this position, you will help ensure that Arm products meet the assurance expectations required by industry standards and regulatory frameworks. The role sits within the Product Security team and is centered on leading external security assessments, coordinating certification work, and making sure the company’s products can achieve and retain the required assurance levels through rigorous evaluation processes.

What you will do

• Act as the primary technical contact for accredited third-party security laboratories that evaluate Arm products.
• Take ownership of security evaluation and certification programs from beginning to end, including planning the work, driving execution, managing documentation, and closing out the program.
• Ensure that all required evidence, test vectors, supporting documents, and other certification artefacts are complete, correct, and delivered within the expected timelines.
• Review findings from external labs, confirm whether issues are valid, and make sure corrective actions are carried out and re-tested when needed.
• Keep up to date with evolving assurance and certification schemes, including Common Criteria, PSA Certified, SESIP, FIPS, OCP Safe, ISO 21434, IEC 62443, and similar standards.
• Build and maintain clear, thorough, and current documentation covering evaluation methods and certification workflows.
• Provide guidance, coaching, and mentoring to internal teams on evaluation practices, certification readiness, and standards interpretation.

What we are looking for

• At least 10 years of experience in product security, security evaluation, certification, or a closely related area.
• Strong knowledge of security evaluation and certification frameworks such as Common Criteria, SESIP, PSA Certified, FIPS 140-3, ISO 21434, EU-CRA, or equivalent schemes.
• Demonstrated experience working with external security laboratories and handling formal evaluation processes.
• Good understanding of cryptographic primitives, secure key lifecycle management, and secure provisioning flows.
• Experience with silicon or SoC security architecture, including threat modelling, attacker modelling, and countermeasure design.
• Strong organisational ability and the capacity to manage complex projects involving multiple stakeholders.
• Excellent communication, negotiation, and documentation skills.
• Ability to work effectively with engineering, product, and security teams across functions.

Desirable experience

• Background with secure hardware components such as cryptographic accelerators, root-of-trust modules, secure enclaves, HSMs, or TEE/TF-M environments.
• Experience with secure firmware elements such as secure boot ROMs, bootloaders, TFM/TFA, OP-TEE, or hypervisor/microvisor technologies.
• Practical understanding of semiconductor manufacturing processes and supply-chain security.
• Familiarity with side-channel analysis, fault-injection testing, and hardware penetration testing methods.

Working arrangement

Arm uses a hybrid working model. The company’s approach is intended to support both strong performance and personal wellbeing, combining in-person collaboration with flexibility. Teams are given room to decide the hybrid pattern that best fits their work and local needs, and the exact arrangement for this role will be shared during the application process. In some locations, flexibility may be limited by legal, regulatory, tax, or other considerations, and Arm says it will work with candidates to find the best possible solution.

Additional information

Arm states that a relocation package is available for this role, including support with visa sponsorship for candidates who require it.

If you need support or adjustments during recruitment, Arm invites you to contact its accommodations team by email. The company says examples of support can include breaks between interviews, having documents read aloud, or help with office accessibility. Requests are handled confidentially and only shared when necessary to arrange the accommodation.

Arm describes itself as an equal opportunity employer and says it is committed to a respectful workplace where applicants and employees are treated fairly regardless of race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

The advertised salary range for this position is £126,200 to £170,800 per year.

To apply, use the application options on Arm’s careers site for this role. Candidates can also save the job, view the location, or proceed through the standard application flow from the posting.

Degree Requirement: Not Specified

Visa Sponsorship Promising