Senior Security Evaluator – Crypto code review

As a Crypto Library Code Reviewer, you apply expertise in secure cryptographic implementations to identify weaknesses and craft attack scenarios. You work with cross-functional teams to improve crypto software and justify security in certifications. You engage with crypto library developers, contribute to international evaluation efforts, and document findings for developers and approval bodies. The role blends technical cryptography with hardware security insights in a fast-evolving product landscape.

• very good training program
• supportive work environment
• competitive salary package
• multicultural team
• informal and intellectually challenging work environment

• Identify weaknesses in cryptographic implementations in embedded systems
• Define sophisticated attack scenarios using state-of-the-art techniques (side-channel, fault injection)
• Convince product developers to improve implementations and provide argumentation for certification schemes
• Collaborate with teams in secure coding, secure hardware design, fault injection, side channel, and evaluation methodology
• Document findings and rationale for developers and approval bodies
• Support colleagues executing attack scenarios in labs and learn from diverse vendor solutions
• Participate in Brightsight training and technical domain groups to stay at the state-of-the-art

• BSc, MSc or PhD in Information Security, Computer Science, Electronics or Mathematics
• Experience with cryptographic implementations and testing for embedded systems
• Knowledge of DES, AES, RSA, ECC, HMAC
• Understanding of Post-Quantum Cryptography is preferred
• Ability to understand and apply state-of-the-art attack methods (side-channel, fault injection)
• Strong oral and written communication in English
• Ability to guide and support experts in side-channel and fault-injection attacks

• strong communication and argumentation skills
• collaboration and cross-cultural teamwork
• ability to explain weaknesses clearly to developers and stakeholders
• DES, AES, RSA, ECC, HMAC cryptographic implementations
• secure implementations for embedded systems
• side-channel analysis