Security Evaluator - Embedded Code Reviewer, Barcelona

Social network you want to login/join with:

Security Evaluator - Embedded Code Reviewer, Barcelona

Client:

SGS

Location:

Barcelona, Spain

Job Category:

Other

EU work permit required:

Yes

Job Views:

4

Posted:

06.03.2025

Expiry Date:

20.04.2025

Job Description:

SGS Brightsight in Barcelona is looking for Senior and Junior Source Code Reviewers. The candidate will join a multidisciplinary team to execute security evaluations on state-of-the-art products. We are looking for people with a fascination for IT security. You will join a multidisciplinary team to execute security evaluations on state-of-the-art products such as trusted execution environments, hypervisors, real-time operating systems, artificial intelligence, secure elements, network devices, key managers, hardware security modules, etc.

Responsibilities:

• Conduct thorough code and design reviews of high-assurance embedded software searching for potential vulnerabilities that could be exploited using logic (fuzzing, stack overflows, etc.) and physical means (side-channel, fault injection, etc.)
• Create a vulnerability analysis based on your code review findings and the state-of-the-art security techniques
• Design a test plan and supervise or conduct it using our high-tech lab equipment
• Design and implement new attack methods

Qualifications:

Must:

• You have a Bachelor's or Master's degree in a technical field of study (computer science, telecommunications, electronics, physics, mathematics)
• You have knowledge/experience in code review/development for assembler, C, and Java
• You have knowledge/experience in applied cryptography (AES, DES, RSA, ECC, etc.)
• You can work independently and collaboratively in a team environment
• You have strong analytical and problem-solving skills with a keen attention to detail
• You have English language skills
• Knowledge in payment protocols such as EMVCo, MasterCard, Visa, AMEX, etc.
• Knowledge of side-channel and fault injection concepts and techniques
• Experience in security bug finding and exploitation
• Familiarity with industry-specific standards and regulations for embedded systems, such as MISRA C
• Knowledge of software testing methodologies, tools, and frameworks used in the embedded domain (Common Criteria, SESIP, PSA, etc.)
• Solid understanding of embedded systems development principles and practices