Embedded Security Engineer

Cerebras Systems builds the world's largest AI chip, 56 times larger than GPUs. Our novel wafer‑scale architecture provides the AI compute power of dozens of GPUs on a single chip, with the programming simplicity of a single device. This approach allows Cerebras to deliver industry‑leading training and inference speeds and empowers machine learning users to effortlessly run large-scale ML applications, without the hassle of managing hundreds of GPUs or TPUs.

Cerebras' current customers include top model labs, global enterprises, and cutting‑edge AI‑native startups. OpenAI recently announced a multi‑year partnership with Cerebras, to deploy 750 megawatts of scale, transforming key workloads with ultra high‑speed inference.

Thanks to the groundbreaking wafer‑scale architecture, Cerebras Inference offers the fastest Generative AI inference solution in the world, over 10 times faster than GPU‑based hyperscale cloud inference services. This order of magnitude increase in speed is transforming the user experience of AI applications, unlocking real‑time iteration and increasing intelligence via additional agentic computation.

As part of the Embedded Software team building the foundational software stack for the Cerebras Wafer‑Scale Engine (WSE), this role sits at the heart of one of the most advanced computing systems in the world. The WSE powers breakthrough AI compute, and the embedded software you’ll help secure touches everything from low‑level microcontrollers and wafer‑scale monitoring logic to system administration services and CPU‑level Linux/BSP components.

As we scale our systems to new levels of performance and deployment, strengthening our security posture is a critical part of ensuring reliability, safety, and trust in Cerebras technology.

In this role, you will define, design, and own the embedded security domain end‑to‑end. You will architect mechanisms such as secure boot and Root of Trust, drive secure firmware development practices, and collaborate across security, operations, and manufacturing to ensure seamless deployment. This is a highly impactful senior position for an engineer who wants to combine deep systems expertise with strategic security ownership—your work will directly shape the security of next‑generation wafer‑scale systems.

• Design and implement embedded security strategies for the Cerebras WSE platform, including secure boot, firmware authentication, and Root of Trust infrastructure.
• Maintain and enhance repositories such as Linux kernel, U‑Boot, and CPU related BSP components.
• Partner closely with the Security Engineering team to define requirements, threat models, and the scope of work.
• Coordinate with Manufacturing and Operations to design deployment strategies, secure pipelines, and system provisioning workflows.
• Support general embedded development for microcontrollers and Linux level applications involved in monitoring and controlling the WSE.
• Drive best practices in secure coding, vulnerability mitigation, and long‑term maintainability for embedded software components.
• Participate in code reviews, system design, and cross functional architectural discussions.

Minimum Qualifications

• Bachelor’s degree in computer engineering, Electrical Engineering, Computer Science, or related field.
• 5+ years of experience in embedded systems development (C/C++), firmware, or BSP‑level work.
• Hands‑on experience with embedded Linux, U‑Boot, kernel configuration, or low‑level driver development.
• Proficiency with secure boot concepts, cryptographic primitives for firmware security, and hardware/software root‑of‑trust mechanisms.
• Familiarity with microcontroller development, RTOS environments, or SoC/CPU boot flows.
• Ability to drive projects end‑to‑end with cross‑functional teams (security, manufacturing, operations, hardware).
• Strong debugging skills with tools such as JTAG, logic analyzers, or serial consoles.

• Preferred Qualifications
• Master’s degree in computer engineering, Electrical Engineering, Computer Science, or related field.
• Experience working with NXP or ARM‑based SoCs, particularly around secure boot (HAB, AHAB) and related hardware…