硬件安全架构师
Hardware Security Architect
### **关于 Positron AI**
Positron AI 正在打造下一代 AI 推理加速器，从零开始设计，专为低延迟、高吞吐量的大语言模型推理而优化。我们的第一代 ASIC 芯片 Asimov 是面向前沿 AI 工作负载的尖端加速器，后续版本已开始研发。
### **职位概述**
负责 Positron AI 加速器平台的硬件安全架构，确保在整个产品生命周期中客户模型、用户数据、固件、知识产权和安全运行得到保护。该职位涵盖从架构到生产部署的全流程。
### **主要职责**
**芯片安全架构**
- 定义 Positron 平台的整体芯片安全架构。
- 负责安全启动、硬件信任根、信任链、认证固件和度量启动。
- 负责安全调试、安全制造、熔丝编程、密钥配置和设备身份。
- 负责密钥层级、防回滚保护、JTAG 安全、扫描访问控制和生命周期状态。
**AI 资产保护**
- 通过权重加密和权重认证保护客户模型和权重。
- 通过链路加密、PCIe 安全、CXL 安全和片上互连安全保护在传输中的数据。
- 负责 DRAM 加密、安全 DMA、安全内存区域和机密计算技术。
**威胁建模与安全审查**
- 进行架构安全审查并开发平台上的攻击模型。
- 缓解物理攻击、故障注入、旁道攻击、重放攻击、固件被破坏和供应链攻击。
**跨职能合作**
- 与固件、软件、架构、DFT、验证、制造和云安全团队合作，将安全嵌入整个产品生命周期。
**行业参与**
- 跟踪 NIST、FIPS、CCA、RISC-V 安全、Arm 安全标准以及后量子密码学和机密 AI 等新兴领域。
**AI 驱动的工程**
- 应用 AI 辅助技术进行威胁建模、安全验证、覆盖率分析和文档编写。
### **所需资格**
- 12 年以上硬件安全架构经验。
- 在安全启动和硬件信任根设计方面有深入专业知识。
- 强大的密码学和密钥管理能力。
- 有安全制造流程的实际操作经验。
- 对安全关键的芯片启动有扎实的理解。
查看英文原文
### **About Positron AI**
Positron AI is building next-generation AI inference accelerators designed from the ground up for low-latency, high-throughput large language model inference. Our first-generation ASIC, Asimov, is a cutting-edge accelerator targeting frontier AI workloads, with additional generations already underway.
### **Role Overview**
Own the hardware security architecture for Positron's AI accelerator platform, ensuring protection of customer models, user data, firmware, intellectual property, and secure operation throughout the product lifecycle. This role spans architecture through production deployment.
### **Key Responsibilities**
**Silicon Security Architecture**
- Define the overall silicon security architecture for Positron's platform.
- Own secure boot, hardware root of trust, chain of trust, authenticated firmware, and measured boot.
- Own secure debug, secure manufacturing, fuse programming, key provisioning, and device identity.
- Own key ladders, anti-rollback protections, JTAG security, scan access control, and lifecycle states.
**AI Asset Protection**
- Protect customer models and weights through weight encryption and weight authentication.
- Secure data in motion via link encryption, PCIe security, CXL security, and on-chip fabric security.
- Own DRAM encryption, secure DMA, secure memory regions, and confidential computing techniques.
**Threat Modeling & Security Reviews**
- Perform architecture security reviews and develop attack models across the platform.
- Mitigate physical attacks, fault injection, side-channel attacks, replay attacks, firmware compromise, and supply-chain attacks.
**Cross-Functional Partnership**
- Partner with firmware, software, architecture, DFT, validation, manufacturing, and cloud security teams to embed security throughout the product lifecycle.
**Industry Engagement**
- Stay current with NIST, FIPS, CCA, RISC-V security, and Arm security standards, as well as emerging areas like post-quantum cryptography and confidential AI.
**AI-Enabled Engineering**
- Apply AI-assisted techniques for threat modeling, security verification, coverage analysis, and documentation.
### **Required Qualifications**
- 12+ years of experience in hardware security architecture.
- Deep expertise in secure boot and hardware root of trust design.
- Strong cryptography and key management ability.
- Hands-on experience with secure manufacturing processes.
- A solid grasp of silicon bring-up in a security-critical context.
### **Preferred Qualifications**
- Experience with AI accelerator platforms.
- Familiarity with HSMs and TPMs.
- Expert-level proficiency in TEE, CCA, and Arm TrustZone architectures.
- Experience with confidential computing, PCIe IDE, and CXL IDE.
#### **Leveling & Scope**
While this role is currently posted at a specific level, we are a growth-oriented organization and are open to hiring at a more senior level for the right candidate. Please note that this job description serves as a focused but generalized overview of the role; specific responsibilities and impact expectations will be tailored to the experience and seniority of the final hire.
### **What Success Looks Like**
Success in this role looks like a security architecture deployed across the entire product family, strong protection of customer models, a secure manufacturing pipeline, and production-ready silicon security.
### **Why Join Us?**
- Architect the security foundation for a new generation of AI inference accelerators from the ground up, with direct influence over how customer models and data are protected.
- Tackle some of the hardest problems in silicon security, from hardware root of trust through confidential computing, at a company building frontier AI infrastructure.
### **Compensation & Benefits**
The base salary range for this role is $200,000 – $300,000.
Please note that the figures provided represent the base salary range only and do not include other elements of our total compensation package, equity, or comprehensive benefits.
At Positron AI, we value the unique expertise each candidate brings. While the range above reflects our typical expectation for the position, we reserve the flexibility to exceed this range for candidates whose specialized skills, significant experience, or unique qualifications fall outside the standard scope of the role. Final offers are determined based on a variety of factors, including internal equity, and individual impact.
### **Benefits & Perks**
We want you to do your best work and feel confident that you and your family are taken care of. That means comprehensive coverage, real time to rest, and support for your future.
**Health and wellness**
- Fully company-paid medical, dental, and vision insurance for you and your dependents
- Company-paid life and disability coverage, with voluntary options to add more
- Supplemental hospital, critical illness, and accident coverage available
**Time off and flexibility**
- Unlimited paid time off, so you can truly unplug and recharge
- 13 paid company holidays
- Remote-first culture with a company-provided computer and home office setup
**Compensation and future**
- Competitive salary and equity
- 401(k) with company matching, eligible from day one
### **Visa Support**
This position is open to candidates currently authorized to work in the U.S. We cannot provide new visa sponsorship for this role but are open to facilitating H-1B visa transfers for eligible candidates.
**Equal Opportunity Employer.** If you're excited about the role but don't meet every bullet, we'd still love to hear from you.