Mobile Cybersecurity Evaluation Engineer W/M

SERMA Safety and Security; Chevanceaux; Sur place; EUR 55 000 - 90 000; Plein temps

Résumé du poste

SERMA Safety and Security is seeking a mobile security specialist to join its Security Laboratory in France. You will participate in mobile security evaluation projects, review code, and perform penetration tests on Android and iOS platforms.

You will contribute to R&D activities, tool development, and the creation of new attack techniques, applying security standards such as EMVCo SBMP and PCI. Fluency in technical English is essential.

Qualifications

• Degree in Computer Engineering or equivalent.
• Hacker mindset and passion for technical challenges.
• Curious, rigorous, and genuinely interested in cybersecurity.
• Good understanding of Android and iOS platforms or embedded Linux and their security models, plus programming languages (Java, C/C++, ARM and x86 assembly).
• Familiar with application reverse engineering and static/dynamic analysis tools.
• Knowledge of mobile security standards, authentication mechanisms, cryptography, and countermeasures is highly desirable.
• Fluency in technical English is essential.

Responsabilités

• Analyze the software security of mobile and connected devices.
• Perform code reviews and penetration testing on Android and iOS.
• Participate in R&D activities; develop tools and new attack techniques.

Connaissances

Hacker mindset

Curious

Rigorous

Android security

iOS security

Embedded Linux

Java

C/C++

ARM Assembly

x86 Assembly

Reverse engineering

Static analysis

Dynamic analysis

Cryptography

Countermeasures

English fluency

Formation

Computer Engineering degree

Description du poste

The Security Laboratory provides evaluation and expertise services in information security. Its core business: identifying and exploiting security vulnerabilities in products or systems entrusted to us by our clients.

As certified “hackers” approved by ANSSI (the French National Cybersecurity Agency), our team of experts works on a wide range of products in various fields, including mobile security, through the evaluation of mobile payment applications, content protection solutions, and authentication systems.

These products are assessed according to evaluation frameworks such as EMVCo SBMP (Software-Based Mobile Payment), PCI 3DS, and PCI mPOC (Mobile Payments on COTS).

As a reinforcement to the technical team, you will participate in mobile security evaluation projects as well as R&D activities in this field (tool development, creation of new attack techniques).

You will analyze the software security of mobile and connected devices, particularly on Android and iOS platforms. This involves understanding how a product works, performing code reviews, and conducting penetration tests to identify potential vulnerabilities.

Your Profile

You have a degree in Computer Engineering (or equivalent), but most importantly, you have a hacker mindset and a passion for technical challenges.

You are curious, rigorous, and have a genuine interest in cybersecurity. You enjoy learning new things, staying updated on the latest developments, and evolving in the complex and stimulating field of security.

You have a good understanding of the Android and iOS mobile platforms or embedded Linux, along with their security models, as well as the associated programming languages (Java, C/C++, ARM and x86 assembly).

You are familiar with application reverse engineering and static and dynamic analysis tools. Knowledge of mobile security standards, state‑of‑the‑art authentication mechanisms, cryptography, and countermeasures is highly desirable.

Fluency in technical English is essential.