Sr. Staff Platform Security Engineer, Confidential Computing

Groq is hiring a Sr. Staff Platform Security Engineer to build hardware-rooted security foundations that help protect sensitive AI workloads across both hardware and software boundaries. In this hybrid role in the San Francisco Bay Area, you will set technical direction and lead security architecture across firmware, hardware trust, attestation, trusted execution environments (TEEs), and protected workload execution, partnering closely with engineering teams at the foundation of the computing stack.

What you will do

• Own and set technical direction for security capabilities spanning hardware, firmware, systems software, and protected workload execution.
• Design and build security architectures for hardware-rooted trust, including attestation, trusted execution environments (TEEs), and hardware-backed isolation.
• Architect attestation capabilities that establish and verify trust across hardware, firmware, host, and workload boundaries.
• Partner with hardware, firmware, and systems engineers to shape platform integrity, secure and measured boot, device identity, and other hardware-rooted security capabilities.
• Design security approaches that enable protected workload execution while maintaining trust across the workload lifecycle.
• Create secure cryptographic designs for key material, credentials, identity, certificates, and provisioning within trusted computing environments.
• Shape trusted compute infrastructure security across the full lifecycle, from provisioning and platform initialization through operation and decommissioning.
• Lead threat modeling and security analysis across hardware, firmware, host software, and workload execution, identifying systemic risks and driving durable mitigations.
• Develop systems software, security tooling, and automation so hardware-backed security capabilities are reliable and operable at scale.
• Lead security-sensitive designs across organizational boundaries by translating complex hardware and systems risks into practical engineering decisions.
• Establish technical patterns and influence security direction across hardware, firmware, systems, platform, and security engineering.
• Communicate trust models, security architecture, technical tradeoffs, and risk to engineers, technical leaders, and security leadership.

What you bring

• 6+ years of systems, firmware, hardware, or security engineering experience, with deep expertise in low-level systems security and experience with hardware-rooted trust, attestation, TEEs, confidential computing, or related technologies.
• Proven ability to set technical direction and own complex security architecture across multiple layers of the hardware and software stack.
• Deep expertise in firmware security, hardware-rooted trust, attestation, trusted execution environments, protected workload execution, or related low-level domains.
• Strong understanding of hardware-rooted trust concepts including roots of trust, platform integrity, secure or measured boot, device identity, and hardware-backed attestation.
• Experience designing or implementing attestation systems and reasoning about trust across hardware, firmware, host, and workload boundaries.
• Strong firmware and low-level systems security knowledge, including boot chains, platform integrity, and security boundaries between hardware and software.
• Strong understanding of cryptographic systems, including key management, certificate lifecycle, secure credential management, and secure provisioning in trusted computing environments.
• Systems engineering experience building low-level systems software, security tooling, firmware, or production automation in C, C++, Rust, Go, Python, or similar languages.
• Ability to threat model complex systems and reason about attacks spanning hardware, firmware, operating systems, infrastructure, and application workloads.
• Experience leading ambiguous, cross-functional technical initiatives and influencing direction across highly specialized engineering disciplines.
• Ability to communicate complex trust models, security architecture, and technical risk clearly to different audiences.

Technologies

• C
• C++
• Rust
• Go
• Python
• Confidential computing
• Trusted execution environments (TEEs)

Benefits

• Long-Term Incentive (LTI) Program
• Robust suite of employee benefits

Mission

• Build hardware-rooted security foundations that protect sensitive AI workloads across hardware and software boundaries.
• Set technical direction and build security capabilities spanning firmware security, hardware trust, attestation, trusted execution environments, and protected workload execution.
• Work close to the hardware layer and partner across hardware, firmware, systems, platform, and security engineering to solve security challenges at the foundation of the computing stack.

Location and work style

This role is based in one of Groq’s three hiring hubs: the Dallas, San Francisco, or New York City area. The person hired must be based in one of these areas. Flexibility to work remotely is available while a local Groq office is established, with an expectation the role will transition onsite once the office opens.

Compensation

• Total cash salary range (inclusive of potential bonus value): $341,400 - $401,600.
• Range is specific to candidates located in the United States.
• Compensation for international candidates will vary based on local market dynamics.
• Groq includes potential bonus value directly into base pay through its Total Cash philosophy.

Additional information

• Export controls: This position may require access to technology/information subject to U.S. export control laws (EAR). Candidates must qualify as U.S. Persons for export control purposes or be eligible for an applicable export license.
• Equal opportunity and accommodations: Groq is an Equal Opportunity Employer and committed to providing reasonable accommodations to qualified individuals. Requests for accommodations can be sent to [email protected] (for accommodation requests only).
• Fair chance: Groq encourages applications from people with criminal record histories in accordance with the California Fair Chance Act and related ordinances.
• AI in hiring: Groq may use AI tools to assist with application review, evaluating qualifications, scheduling interviews, analyzing assessment responses, or supporting recruiting operations. Hiring decisions are subject to human review. Candidates may request accommodations or additional information about AI use by contacting [email protected].
• Offer contingency: Offers are contingent on verification of identity and employment authorization in accordance with federal law.