About The Role

As a Platform Security Engineer within HP IQ’s Product Security team, you will ensure our infrastructure and services are designed, built, and operated with security at their core. You’ll influence architecture and design decisions, integrate security into engineering workflows, and scale security practices that enable teams to move fast without compromising trust.

What You Might Do

• Design, implement, and scale security controls across cloud, infrastructure, and hardware layers.
• Build automated security controls, policy enforcement, and detection capabilities into CI/CD pipelines and platform tooling.
• Define security standards and reference architectures that serve as the engineering baseline across infrastructure and services.
• Drive adoption of secure-by-default principles across engineering teams, influencing system design and platform planning.
• Perform threat modeling and security architecture reviews that directly shape product and platform decisions.
• Translate compliance requirements (SOC 2, ISO 27001, NIST) into technical security controls, owning the engineering implementation end-to-end.
• Own the vulnerability management lifecycle end-to-end, driving root cause analysis, defining remediation patterns, and engineering hardening solutions into platform infrastructure.

Essential Qualifications

• 5+ years of experience as a platform security engineer or equivalent.
• Strong command of security principles applied to production systems, with demonstrated experience designing and building controls at scale.
• Experience building and securing production workloads in at least one public cloud (AWS, Azure, or GCP), with working knowledge of the relevant Well-Architected Framework security pillars.
• Proven experience securing Kubernetes, container runtimes, and software supply chain components.
• Strong Infrastructure-as-Code experience (Terraform or equivalent), applied to hardening infrastructure configurations, enforcing least-privilege baselines, and eliminating configuration drift across environments.
• Proficiency in at least one modern language (Go, Python, TypeScript, or Java), applied to building internal security tooling and automation.​​​​​​​​​​​​​​​​
• Ability to communicate security architecture decisions and tradeoffs clearly to both engineering teams and leadership.

Preferred Skills

• Hands-on experience designing and building identity and network security components in infrastructure, including IAM policies, service mesh configurations, network segmentation, and zero-trust controls.
• Proven ability to architect and integrate security controls across CI/CD pipelines, owning the DevSecOps toolchain from design through enforcement.
• Experience translating and implementing compliance framework requirements (e.g., SOC 2, ISO 27001, or NIST) into engineering deliverables.
• Experience securing AI products or edge-connected systems at scale.
• Experience building or contributing to a security engineering function within a product-focused organization.
• Track record of driving cross-functional security outcomes without direct authority, including influencing engineering and platform roadmaps toward stronger security posture.

Salary: $180,000- $250,000

About The Role

As an Offensive Security Engineer within HP IQ’s Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the product lifecycle. You’ll influence design decisions, embed security into development workflows, and continuously assess attack surfaces to guide and enhance secure development.

What You Might Do

• Lead penetration tests and security assessments for product and feature releases.
• Conduct continuous security engagements, proactively identifying vulnerabilities and driving remediation to closure.
• Advise engineering and product teams on remediation strategy, validating fixes and tracking measurable improvements to security posture over time.​​​​​​​​​​​​​​​​
• Assess attack surfaces across internet-facing services, APIs, and device interfaces (Wi-Fi, BLE, USB).
• Perform threat modeling and security architecture reviews that directly shape product decisions.
• Define and lead end-to-end risk reduction initiatives with internal and external stakeholders, aligning offensive findings to strategic security investments.​​​​​​​​​​​​​​​​
• Shape the offensive security roadmap, defining assessment scope, tooling, and methodology standards.

Essential Qualifications

• 5+ years of experience as an offensive security engineer or equivalent.
• Experience threat modeling (e.g., STRIDE) and mapping adversary techniques (e.g., MITRE ATT&CK).
• Expertise in identifying and exploiting common vulnerabilities (e.g., OWASP Top 10, SANS 25).
• Hands-on experience testing embedded systems, firmware, and device software, including bootloader security, OS hardening, and low-level interface exploitation (e.g., JTAG, UART, SPI/I2C).
• Demonstrated experience with hardware-assisted attack techniques such as fault injection, side-channel analysis, and glitching, using tools like ChipWhisperer, OpenOCD, Ghidra, Binwalk. 
• Proficiency in at least one modern language (Go, Python, Java, or TypeScript), applied to building offensive tooling, exploits, or automation.
• Ability to communicate security findings, risk posture, and strategic recommendations to both engineering teams and executive stakeholders.

Preferred Skills

• • Experience securing AI products or edge-connected systems at scale.
  • Experience building or maturing an offensive security practice within a product-focused organization. 
  • Experience validating technical controls to meet compliance standards such as SOC 2, ISO 27001, or PCI DSS. 
  • Experience formalizing secure-by-design standards across diverse environments, including applications, cloud services, and device software, translating principles into enforceable controls and engineering patterns.​​​​​​​​​​​​​​​​
  • Security research background with demonstrated findings, CVE disclosures, or public contributions to the offensive security community.
  • Track record of driving cross-functional security outcomes without direct authority, including aligning engineering and product roadmaps to offensive findings.​​​​​​​​​​​​​​​​

Salary: $180,000- $250,000

About the Role

As a Senior Software Engineer specializing in Device Security, you will play a key role in helping HP IQ lead the industry in advancing the security of AI devices, and empowering business and users with control of their privacy and personal data in the quickly evolving AI-driven world. Privacy and security are table stakes at HP IQ, and absolutely integral to our success as a dynamic company with a deep commitment to product.

You will own projects through their entire life cycle, building secure systems for our innovative devices by threat modeling, designing secure architectures, and implementing them. This role focuses on designing and implementing solutions across the entire software stack of embedded systems, PCs, and server class workstations. This includes the way they interface with the outside world, in a way that provides joyful user experiences without compromising privacy & security. The technology that you will create will maintain and strengthen the trust that HP IQ promises to our customers.

What You Might Do

• Lead the design and implementation of embedded device security architecture from the ground up. This includes using the best industry standard cryptography practices for things like secure key management systems, hardware secure boot, PKI, efficient encryption of data, and more.
• Collaborate cross-functionally with the CoreOS, Firmware, Design, and Cloud Services teams to create robust security features.
• Develop custom TrustZone or native kernel applications to enhance hardware-backed identity solutions and data protection.
• Work on high-profile projects, such as secure channels between devices, protecting personal data, and automatic theft detection; which all require secure and efficient data handling.
• Interface with biometric sensors to create secure channels for data flow inside and outside device boundaries.
• Assist in vulnerability management, and apply secure SDLC practices across the company.

Essential Qualifications

• 6+ years of experience in secure programming in embedded system, AOSP, or Windows environments, primarily in C, C++, or Java.
• Strong understanding of general embedded systems security concepts, including establishing roots of trust, secure boot, cryptography, PKI, or application sandboxing.
• Experience in firmware security, OS-level security, or network security.
• Demonstrated ability to architect and lead multi-disciplinary projects from concept to deployment.
• Experience in designing secure interfaces with biometric sensors, custom PKI handling, or factory flow processes.
• Ability to work closely with cross-functional teams to assess attack surface and threat models across many different features.
• Deep understanding (OR deep desire to learn) of cryptography, security, and privacy theory and practices.

Preferred Skills

• Background in embedded systems like consumer electronics, IoT, medical, or payment devices or systems.
• Experience with AOSP and Linux security, including TrustZone, TEE, AVB, Keystore, and SELinux.
• Experience with privacy compliance standards like GDPR, CCPA, HIPAA, or ISO.

Salary: $216,000- $288,000

About The Role

As a Senior Software Engineer specializing in Services Security, you will play a key role in helping HP IQ lead the industry in advancing the security of cloud services, and empowering users with control of their privacy and personal data in the quickly evolving AI-driven world. Privacy and security are table stakes at HP IQ, and absolutely integral to our success as a dynamic company with a deep commitment to product.

You will own projects through their entire life cycle, building secure systems for our cloud services by threat modeling, designing secure architectures, and implementing them. This role focuses on designing and implementing services that balance privacy and security with user experience, while scaling to support anywhere from 10 to 10 million concurrent users! The technology that you will create will maintain and strengthen the trust that HP IQ promises to our users.

What You Might Do

• Lead the design and implementation of cloud services security architecture from the ground up. This includes using the best industry standard cryptography practices for things like secure key management systems, PKI, crypto services, privacy services, etc.
• Collaborate cross-functionally with the Cloud Services, AI Services, Web, Design, and Device Experience teams to create robust security features.
• Design services to empower users to make informed security and privacy decisions for their own personal data.
• Work on high-profile projects, such as secure backup and restore systems, that require secure and efficient data handling.
• Assist in vulnerability management and apply secure coding practices across the company and development lifecycle.

Essential Qualifications 

• 6+ years of experience in secure programming in cloud-native environments, primarily in Java.
• Deep understanding of (OR deep desire to learn) cryptography, security, and privacy theory and practices.
• Breadth of experience in product development and a holistic approach to problem solving.
• Demonstrated ability to architect and lead multi-disciplinary projects from concept to deployment.
• Ability to work closely with cross-functional teams to assess attack surface and threat models across many different features.
• Proactive approach to product development – you see a need and you jump in to make it happen.
• Strong communication skills with the ability to ask for help when needed, defend opinions, give and accept feedback, and accept ideas and solutions from others.

Preferred Skills

• Familiarity with authentication and authorization protocols (OAuth, SSO, OPAQUE, etc.)
• Experience deploying and maintaining cloud-based cryptographic systems (KMS, HSM, etc.)
• Networking protocols (gRPC, mTLS, https, etc.)
• Experience building services in kubernetes environments
• Familiarity with multiple cloud providers (AWS, Azure, Google Cloud)

Salary: $230,000- $288,000