Cybersecurity Design Engineer

Quest Global; München; Vor Ort; EUR 65.000 - 85.000; Vollzeit

Zusammenfassung

A leading engineering services provider in Munich is looking for a Cybersecurity Design Engineer to enhance the security of embedded products. The candidate will be expected to design secure architectures, perform threat modeling, and conduct vulnerability assessments. This role demands profound knowledge in cryptography and compliance standards. Strong communication skills are essential as you'll also collaborate with cross-functional teams. If you possess a passion for making a positive impact, consider joining our diverse team.

Qualifikationen

• Strong technical knowledge in secure architecture and cryptography.
• Familiarity with compliance standards such as IEC 62443 and ISO 27001.
• Proficiency in English (written and spoken).

Aufgaben

• Design and implement secure architectures for embedded products.
• Perform threat modeling and risk analysis using STRIDE.
• Help conduct vulnerability assessments and penetration testing.

Kenntnisse

TCP/IP protocols

TLS/SSL implementation

Symmetric & asymmetric encryption

Cryptography

Vulnerability Assessment

Strong communication skills

Ability to work autonomously

Tools

Coverity

BlackDuck

Jobbeschreibung

Job Summary

At Quest Global, it’s not just what we do but how and why we do it that makes us different. With over 25 years as an engineering services provider, we believe in the power of doing things differently to make the impossible possible. Our people are driven by the desire to make the world a better place—to make a positive difference that contributes to a brighter future. We bring together technologies and industries, alongside the contributions of diverse individuals who are empowered by an intentional workplace culture, to solve problems better and faster.

We are seeking a Cybersecurity Design Engineer to join our team and ensure the security of our embedded products. The searched candidate will have strong technical knowledge in secure architecture, cryptography, and compliance standards, combined with good communication and problem‑solving skills.

Key Responsibilities

• Design and implement secure architectures for embedded products and networked devices.
• Perform threat modeling and risk analysis using frameworks such as STRIDE.
• Write security manuals for customers.
• Enforce and support secure coding practices for C/C++ and Python.
• Support implementation of secure boot, firmware integrity checks, and hardware root of trust.
• Support configuration and hardening of Linux‑based operating systems.
• Help conduct vulnerability assessments, penetration testing, and integrate security into CI/CD pipelines.
• Ensure compliance with IEC 62443 (4‑1 and 4‑2) and ISO 27001 standards.
• Collaborate with cross‑functional teams to communicate risks and propose mitigations.

We are known for our extraordinary people who make the impossible possible every day. Questians are driven by hunger, humility, and aspiration.

We wholeheartedly believe in the diversity of thought that comes with fostering a culture rooted in respect, where everyone belongs, is valued, and feels inspired to share their ideas.

We know embracing our unique differences makes us better, and that solving the world’s hardest engineering problems requires diverse ideas, perspectives, and backgrounds.

We shine the brightest when we tap into the many dimensions that thrive across over 21,000 difference‑makers in our workplace.

Work Experience

• Network & Communication Security: TCP/IP, UDP protocols (MQTT, SFTP, FTPS, HTTPS, NTPS, RTP, DHCP, DNS, etc.), TLS/SSL implementation.
• Cryptography: Symmetric & asymmetric encryption (AES, RSA, ECC), key management, hashing algorithms (SHA‑2, SHA‑3), HMAC.
• Public Key Infrastructure (PKI).
• Secure Architecture & Design: Threat modeling, risk analysis, secure boot, firmware integrity, hardware root of trust.
• Implementation: Linux hardening, secure configuration of services (SSH, firewall, etc.).
• Vulnerability Assessment & Testing: Static/dynamic code analysis tools (Coverity, BlackDuck), fuzzing, web UI security testing, CI/CD security integration.
• Standards & Compliance: IEC 62443, ISO 27001 basics.

Soft Skills

• Ability to work autonomously and manage priorities effectively.
• Strong communication skills for internal and external stakeholders.
• Proficiency in English (written and spoken).