Offensive security engineer

OPENCHIP & SOFTWARE TECHNOLOGIES; Barcelona; Hybrid; EUR 90.000 - 140.000; Vollzeit

Benefits dieser Stelle

Гибридная работа

Zusammenfassung

Openchip & Software Technologies ищет старшего инженера по offensive security для обеспечения высочайших стандартов безопасности в программном обеспечении и системах. Ваша роль будет охватывать полный стек разработки, от микроархитектуры до криптографии, и включать руководство моделями угроз и документацией.

Кандидат будет работать в гибридном формате, взаимодействуя с командами по код-ревью, тестированию и SDL, и обеспечит соответствие продуктов отраслевым стандартам.

Qualifikationen

• Степень бакалавра или магистра в соответствующей области.
• Опыт 5–10 лет в области безопасности.
• Опыт работы с Git и CI/CD.
• Знания архитектуры компьютеров (кэш, память, шина).
• Знания по микроархитектурной безопасности, платформенной безопасности и криптографии.
• Понимание протоколов безопасности и Linux/гипервизор безопасность — будет плюсом.
• Командный игрок, инициативность и проактивность.
• Будет плюсом опыт взаимодействия с OpenSSF или открытым исходным кодом.

Aufgaben

• Выявлять уязвимости с использованием оффенсив-методов по всему стеку ПО и прошивки.
• Разрабатывать модели угроз для целевых сценариев использования и развёртываний Openchip SW Stack.
• Создавать и поддерживать документацию по безопасности, включая best practices и стратегии снижения угроз.
• Удерживать соответствие продуктов индустриальным стандартам безопасности (FIPS 140-3, NIST SP 800-193, ISO/IEC 27001).
• Проводить глубокие технические исследования в областях микроархитектурной безопасности, криптографических уязвимостей, fuzzing и реверс-инжиниринга.
• Сотрудничать с коллегами по обзору кода, триажу дефектов, проектной документации и т.д.
• ОбеспечиватьSDL, код-ревью и совместную работу с командами.”
• Участвовать в требованиях к безопасности совместной разработки с аппаратной командой и ко-дизайне.

Kenntnisse

Git

CI/CD

Jira

Low-level security

Cryptography

Ausbildung

Bachelor’s or Master’s degree in a relevant field

Tools

Git

Jira

CI/CD

Jobbeschreibung

Описание:

Openchip is building new RISC-V chips with security at heart, enabling safer and more privacy-respectful execution of data processing workloads like AI models. As a Senior Offensive Security Engineer, you will help to ensure that our software and systems are designed and implemented to the highest security standards.

Задачи:

• Identify security flaws before they can be exploited, using offensive security techniques across the full software and firmware stack.
• Development of comprehensive threat models covering all targeted usages and deployments of Openchip SW Stack.
• create and maintain high-quality security guidance documentation, including best practices, design recommendations, and threat mitigation strategies.
• Drive the alignment of OpenChip products with industry-recognized security standards (e.g., FIPS 140-3, NIST SP 800-193, ISO/IEC 27001).
• Conduct deep technical investigations in areas such as microarchitectural security (e.g., side-channel attacks), cryptographic weaknesses, fuzzing and reverse engineering, code and architecture-level security reviews, logic and memory vulnerabilities (e.g., kernel/firmware privilege escalation).
• Interact with colleagues across projects to unblock issues, or to reach consensus on technical topics.
• Collaborate with colleagues through code reviews, bug triaging, design documents,...
• Contribute to shared team responsibilities (CI failure triaging, documentation, code fixits, rotations...).
• Work with validation teams on required test cases, coverage, and methodologies to ensure robust security verification.
• Work with support Quality team by delivering security guidelines and best practices for implementing a secure development lifecycle (SDL).
• Work with hardware teams, providing requirements for security and influencing hardware/software co-design.

Требования:

• Bachelor or Master's degree in a relevant field.
• Experience in the relevant field (5-10yr).
• Experience with standard tools for source control (git), continuous integration, task management (Jira).
• Solid knowledge about computer architecture (CPU, cache and memory hierarchy, buses,...).
• Knowledge about at least two of the following areas: Microarchitectural security(side channel attacks, fault injection), Platform security features (kernel/firmware hardening, CHERI, CFI, pointer tagging, virtualization-based security, IOMMU), Cryptograpy usage across networks (certificates, signatures, TLS/SSL, PK, remote attestation), Boot integrity technologies (UEFI Secure Boot, measured boot, TPM).
• Cryptography, including experience with cryptography libraries (OpenSSL, libssl, wolfssl, mbedtls, libsodium).
• Team player: communicative and collaborative person who focuses on the outcome of the team above the individual needs.
• Curious about learning new technologies/stacks.
• Capable of within- and cross-team collaboration at the technical level.
• Can-do attitude, proactive and willing to step up and resolve any obstacle.
• Self-aware, self-starter, and self-motivated.
• Будет плюсом: Experience designing for relevant security standards (TCG, IEEE, NIST, FIPS, PCI, ISO 28000 series); Experience designing for crypto security (e.g. certificate handling and PKI, attestation, TPM/HSM); Expert knowledge of common security-relevant protocols (e.g. SSH, TLS, DNS, DHCP, NTP, ICMP); Expert knowledge of Linux, and hypervisor security; Experience with open source software development. In particular, engagement with OpenSSF or other Open Source security organizations, and/or history of contributions to Open Source projects

Условия:

• The opportunity to build a cloud AI deployment platform that will power next generation AI systems.
• A collaborative, innovation-driven environment with significant autonomy and ownership.
• Hybrid work model with flexible scheduling.
• A chance to join one of Europe’s most ambitious companies at the intersection of AI and silicon engineering.