Staff Product Security Engineer

In this role you will drive triage, assessment, and remediation of product security vulnerabilities across Arm hardware and software. You will lead incident response and coordinated disclosure efforts, collaborating with engineers, legal, and external researchers. You’ll own vulnerability communications, CVE assignment, and security advisories, while strengthening PSIRT processes and tooling. You help safeguard security across Arm’s products and foster trust with customers and partners. This position offers impact at scale within a mission to secure AI and computing technologies.

• Drive triage, assessment, and resolution of product security vulnerabilities across Arm hardware and software
• Lead and coordinate product security incident response across engineering, customers, and partners
• Own coordinated vulnerability disclosure activities including strategy, timelines, and advisories
• Represent Arm in security engagements with researchers, customers, partners, and industry bodies
• Support and evolve Arm’s bug bounty programs and researcher engagement
• Improve PSIRT processes, tooling, metrics, and incident response practices
• Safeguard integrity and confidentiality of vulnerability handling with industry best practices

• Experience in a PSIRT, vulnerability disclosure, or bug bounty triage role
• Working knowledge of CVE processes, advisories, severity assessment, and remediation coordination
• Ability to communicate clearly with technical and non-technical audiences across time-sensitive scenarios

• Collaborative mindset
• Calm under pressure
• Clear and concise communication
• Vulnerability handling for hardware and software
• Bug bounty program familiarity
• Familiarity with CVSS and severity scoring