Hardware Security Expert – Low Level / Embedded AI Systems

Please note that the team has moved to a new location. The office is now at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least three times a week.

Lenovo Digital Trust Lab is looking for a Hardware Security Expert – Low Level to focus on securing the embedded and hardware layers of AI pipelines and agentic systems. This role will bring deep expertise in low-level security (firmware, trusted execution, hardware roots of trust) to ensure that our models, data, and orchestration cannot be compromised at the device or infrastructure layer.

You will design, test, and deploy hardware-anchored protections for AI workloads across edge, device, and hybrid environments, and partner with researchers to integrate them into Lenovo’s products and AI ecosystem.

Job Responsibilities:

• Design and implement low-level security mechanisms for AI devices and pipelines (secure boot, trusted execution environments, hardware attestation).
• Research and deploy hardware-anchored model protection techniques, including model encryption, signing, and integrity validation.
• Conduct firmware and hardware security testing to identify risks such as tampering, side-channel leakage, or privilege escalation.
• Develop prototypes for secure AI at the edge, ensuring privacy, integrity, and resilience in device-level inference.
• Collaborate with software and AI teams to integrate hardware controls into the broader Hybrid AI Security stack.
• Build internal tooling for simulation and testing of hardware threats, including malicious firmware, compromised drivers, and physical attacks.
• Track developments in TPM, TEEs, SEs, and hardware security modules, and evaluate their application to agentic AI orchestration.

Minimum Requirements:

• B.Sc. or M.Sc. in Computer Science, Electrical Engineering, Cybersecurity, or a related field.
• 5+ years of experience in hardware or embedded security engineering.
• Hands-on expertise with firmware development and analysis, secure boot, and hardware trust anchors.
• Strong background in low-level programming (C, C++, Rust, or assembly) and debugging embedded systems.
• Familiarity with cryptographic primitives and their hardware implementations.
• Proven track record in vulnerability analysis of firmware, SoCs, or hardware-embedded environments.

Preferred Requirements:

• Experience with Trusted Execution Environments (TEE), Trusted Platform Modules (TPM), and Secure Elements (SE).
• Knowledge of side-channel and fault injection attacks, with experience in relevant testing tools and labs.
• Exposure to edge AI deployments and securing inference at device level.
• Familiarity with hardware security standards and compliance frameworks.
• Contributions to hardware/firmware security research (open-source tools, publications, patents).
• Strong collaboration skills with cross-disciplinary teams (AI, firmware, platform engineering).

What We Offer:

• Health & Disability Insurance
• Pension/ Retirement Plan
• Meal Vouchers
• Employee Referral Bonus
• Children of Lenovo Employees Scholarship Program
• Lenovo and Motorola Product Discounts
• Employee Assistance Program, e.g., for health, legal & financial consultancy
• Internal E-learning Development Platform Available for Employees