Security Engineer - Crypto & Threat Modeling for Open Media

RealityFoundation; Brussel Hoofdstad; Hybrid; EUR 38.000 - 55.000; Vollzeit

Benefits dieser Stelle

Tools and learning budget

Public open-source work

Growth and ownership

Remote-friendly EU-wide

Zusammenfassung

RealityFoundation in Brussels, Belgium, is seeking a security-minded engineer to shape the cryptographic architecture of the RealityCheck pipeline, from device to blockchain.

You will perform end-to-end threat modeling, ensure GDPR-by-design, review code for vulnerabilities, and document security assumptions. The role offers remote work within the EU with a focus on open-source trust and meaningful impact.

Qualifikationen

• Strong foundations in cryptography, hashing, signatures and PKI.
• Experience with threat modeling for mobile-to-backend or blockchain systems.
• Familiarity with GDPR-by-design and data minimization.
• Knowledge of secure mobile environments (TEE, Secure Enclave, hardware-backed storage).
• Experience auditing or supporting security audits of software systems.
• Familiarity with zero-trust principles (a plus).
• Knowledge of C2PA or content credential standards (a plus).

Aufgaben

• Define and own the cryptographic architecture of the RealityCheck pipeline.
• Conduct end-to-end threat modeling across device, app, backend, blockchain, and storage.
• Ensure GDPR compliance is embedded in system design from day one.
• Review code for security vulnerabilities and support remediation with engineering.
• Document security assumptions transparently in support of open-source trust.
• Advise on blockchain choices and smart contract security where relevant.

Kenntnisse

Applied cryptography

Threat modeling

GDPR-by-design

Secure mobile environments

Security audits

Zero-trust

C2PA / content credentials

Jobbeschreibung

RealityFoundation in Brussels, Belgium, is seeking a security-minded engineer to shape the cryptographic architecture of the RealityCheck pipeline, from device to blockchain.

You will perform end-to-end threat modeling, ensure GDPR-by-design, review code for vulnerabilities, and document security assumptions. The role offers remote work within the EU with a focus on open-source trust and meaningful impact.