Security Evaluator (Code reviewer)
Core
Investigate security mechanisms in embedded software (financial, automotive, medical) and define attack scenarios (e.g., fault injection) to exploit vulnerabilities.
Role type
Senior IC security evaluator (source code review & attack scenario design)
Builds
Security evaluations for mobile payment, (U)SIMs, embedded secure elements, automotive, medical, and ID products
Domain
Cybersecurity, embedded systems, hardware/software security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
source code review, embedded systems testing, attack scenario design, fault injection, complex design analysis, technical writing, oral presentation
Preferred skills
(EMV) payment product knowledge, Java Cards experience, security evaluation methodology, hacking techniques
Technologies
Java Cards, fault injection tools, laser equipment
Responsibilities
Review source code of IT products to assess security quality, define sophisticated attack scenarios to exploit vulnerabilities, document findings and argumentation for developers and certification bodies, support colleagues executing attack scenarios, communicate assessment results in face-to-face meetings with international stakeholders
Seniority
Senior, hands-on IC
