Senior Software Security Engineer

About Dolby Laboratories

Dolby Laboratories is a global pioneer in entertainment innovation, merging cutting-edge science with artistic creativity. Their technology enhances experiences across devices, from movie theaters to smartphones, reaching millions worldwide. Dolby fosters a collaborative work environment, challenging projects, and offers competitive compensation alongside flexible work arrangements.

Role Overview and Responsibilities

This senior role involves designing and implementing robust solutions to safeguard Dolby's intellectual property and reduce security vulnerabilities across their products. The engineer will engage in threat analysis, risk assessments, and exploitability research, focusing on protecting IP and mitigating software vulnerabilities. The position demands agility in embedded software contexts, operating at the intersection of operating systems, applications, and hardware.

• Participate in threat modeling and risk evaluation for multiple Dolby products regarding IP security and susceptibility to vulnerabilities.
• Design, develop, test, and validate mechanisms to protect intellectual property.
• Investigate the potential for exploitation of discovered security weaknesses.
• Operate efficiently within embedded systems involving low-level OS, application, and hardware integration.

Required Skills and Qualifications

• At least five years of professional experience specializing in software security.
• Proficiency in C++, C, and Python programming languages.
• Experienced with cryptographic libraries or implementations, including but not limited to crypto++, mbedTLS, or OpenSSL.
• Comprehensive understanding of secure processing environments and Trusted Execution Environments (TEE).
• Hands-on capabilities in software reverse engineering techniques.
• Deep knowledge of executable binary formats and internal structures.
• Strong grasp of common software vulnerabilities and exploitation methodologies like buffer overflows and use-after-free bugs.
• Thorough understanding of operating system internals.
• Skilled in using debugging tools such as disassemblers, decompilers, debuggers, emulators, and virtual machines.
• Excellent analytical thinking and problem-solving abilities.
• Fluency in English, both written and spoken.
• Additional assets include participation in capture-the-flag (CTF) competitions, security research interest, and hobbies in DIY electronics or robotics.

Company Address

77 Sir John Rogerson's Quay, Block C, Grand Canal Docklands, Dublin D02 VK60, Ireland