Overview:
Riscure as part of Keysight is hiring an Security Engineer. As part of the mission statement of the company (driving security forward), Riscure believes that knowledge sharing is key to innovation and evolution of employees.
Responsibilities:
We evaluate the security of products that use embedded and smart card technologies, usually in teams of 2-4 security analysts. The main activities of the evaluation process include analysing threats and weaknesses by taking apart device's specifications, code or hardware, and then developing the necessary tools to attack the security. The results go into a report, often alongside recommendations to help solving the problems found.
In addition to evaluation work we carry out other projects, including consultancy work, research, tool development, and training. As a state-of-the-art lab, our internal research and development process is a necessity to remain competitive. We record the knowledge we gain during our projects in the Riscure knowledge database to ensure it is preserved and shared within Riscure.
Parts of a project may require working at the customer's premises. Depending on the type of assignment and your level of experience you are in regular contact with a customer's technical liaison during a project.
Qualifications:
- You have successfully completed an academic course in Information Technology or Electrical Engineering.
- You have at least 4 years work experience in:
- Programming languages: C, C++, JavaCard, Assembly.
- Smart Cards, Secure elements or other embedded devices such as System-on-Chips, and associated applicable test methods (Logical, Fault Injection and Side Channel Analysis).
- Dealing with the major security evaluation schemes like Common Criteria, SESIP, EMVCo or Global Platform.
- Being responsible for the technical quality of evaluation projects. Ideally you are used to steering a team of analysts during evaluation activities.
- Leading technical projects.
- Experience with software development or (security) testing for embedded systems.
- Knowledge of (EMV) payment products is an advantage, as is experience with security evaluations, attack techniques and an interest in hacking products
- Knowledge and experience with Java Card evaluations, namely:
- Knowledge and experience with Java Card Platform Virtual Machine, the Java Card Platform Runtime Environment and the Java Card Application Programming Interface.
- Knowledge and experience with Java Card System Protection Profile - Closed Configuration, BSI-CC-PP-0101-V2-2020.
- Knowledge and experience with Java Card System Protection Profile - Open Configuration, BSI-CC-PP-0099-V2-2020.
- Supporting project management in coordinating complex evaluation projects under the given timelines and budgets.
- Being the technical interface to customers, various ITSEFs and certification schemes
- You are flexible, and you enjoy travelling to customers in Europe, North America, or Asia every now and then.