Address
SalaryOverview:
THE ROLE:
THE PERSON:
KEY RESPONSIBILITIES:
PREFERRED EXPERIENCE:
ACADEMIC CREDENTIALS:
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
WHAT YOU DO AT AMD CHANGES EVERYTHING
We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives.
AMD together we advance_
Responsibilities: PSIRT SOFTWARE DEVELOPMENT ENGINEER
THE ROLE:
AMD responds to security incidents in collaboration with industry peers, partners, customers, and other PSIRTs. The AMD Product Security Office (PSO) is looking for an experienced software engineer who will be responsible for triaging incoming issues, managing vulnerabilities through analysis, remediation and disclosure and engaging with engineering teams, researchers and partners. This can be a remote position.
THE PERSON:
To be successful in this role, you are passionate about cybersecurity and driving continuous improvement to evolve AMD’s security response. You work effectively in a matrixed environment and can network, build relationships, and break through barriers. You have excellent communication skills and are able to explain issues and risks at both the engineering and executive levels. You are a critical thinker who connects all the dots, prioritizing and balancing multiple work streams on tight deadlines.
KEY RESPONSIBILITIES:
- Manage incoming reports received through the PSIRT mailbox and Bug Bounty program
- Analyze security vulnerabilities, including validation and running PoCs
- Assess, identify and communicate severity (CVSS) and risk to stakeholders
- Propose, help define, and validate mitigations
- Work across business units to drive resolution of security issues and provide guidance regarding vulnerability response
- Develop customer-facing communications for NDA and public disclosure
- Create JSON5 files and publish CVEs to MITRE.org
- Support Coordinated Vulnerability Disclosure (CVD) by negotiating with researchers and partners
- Develop and manage feedback loop to engineering teams to drive continual improvement in the security posture of our products
PREFERRED EXPERIENCE:
- 3-5 years of vulnerability management experience
- 10+ years of related experience in chipset and platform security market and associated technologies
- Understanding of security technology IP industry standards (ESF, NIST, RACGP, TCG, others)
- Knowledge of computer architecture especially an in-depth knowledge of exploitable security components
ACADEMIC CREDENTIALS:
- Bachelor’s or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent
#LI-PA1
Qualifications: At AMD, your base pay is one part of your total rewards package. Your base pay will depend on where your skills, qualifications, experience, and location fit into the hiring range for the position. You may be eligible for incentives based upon your role such as either an annual bonus or sales incentive. Many AMD employees have the opportunity to own shares of AMD stock, as well as a discount when purchasing AMD stock if voluntarily participating in AMD’s Employee Stock Purchase Plan. You’ll also be eligible for competitive benefits described in more detail here.
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
