You will consult and hands-on assist multiple teams in creating risk analyses (e.g. TARA) and performing Threat Modeling (STRIDE)You will guide, teach, and train teams on how to create secure software architecturesActively adapting the software development process to benefit from modern tools to enhance security (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks)You will drive project decisions to roll out security measuresYou will actively check source code and configurations for potential security issues and guide / train development teams on how to prevent identified issuesQualifications
Basic requirements and Education
- University degree in computer science or a comparable field of study, ideally with a security focus
- Business fluent English
Required Experience and Skills
- Deep technical understanding of best-practice security features and internals of Linux (SELinux, dm-verity, Secure Boot, ...) and Android (Application Sandboxing, Permission Model, Encryption, Debugging, Secure Coding Practices, Authentication and Authorization, )
- Knowledge of isolation techniques and containerization mechanisms
- Experience in security source code reviews and active vulnerability hunting
- Professional experience in Threat Modeling (STRIDE), TARA and ISO 21434
- A background in modern software development in C++ / Java / Kotlin on Linux / Android
Keywords
- Automotive Security,
- Cyber Security,
- Android,
- Linux,
- Secure Coding,
- Threat Modeling,
Skills Required
Cyber Security, Android, Linux, secure coding , threat modeling , C++, Java, Kotlin