Mobile Cybersecurity Evaluation Engineer W/M

SERMA Safety and Security; Chevanceaux; Sur place; EUR 45 000 - 70 000; Plein temps

Résumé du poste

SERMA Safety and Security in France is seeking a security researcher to join a team that identifies and exploits vulnerabilities in mobile and connected devices. You will conduct penetration tests, perform code reviews, and contribute to R&D efforts in tool development and new attack techniques for Android, iOS, and embedded Linux.

The ideal candidate has a Computer Engineering degree or equivalent, a hacker mindset, fluency in technical English, and hands-on experience with reverse engineering,

Qualifications

• Degree in Computer Engineering or equivalent.
• Hacker mindset with passion for technical challenges.
• Fluent technical English.

Responsabilités

• Participate in mobile security evaluation projects.
• Perform code reviews and penetration tests.
• Contribute to R&D activities and tool development.

Connaissances

Android security

iOS security

Penetration testing

Code reviews

Reverse engineering

Static analysis

Dynamic analysis

Java

C/C++

ARM assembly

x86 assembly

English fluency

Formation

Bachelor's degree in Computer Engineering

Outils

Static analysis tools

Dynamic analysis tools

Description du poste

The Security Laboratory provides evaluation and expertise services in information security. Its core business: identifying and exploiting security vulnerabilities in products or systems entrusted to us by our clients.

As certified “hackers” approved by ANSSI (the French National Cybersecurity Agency), our team of experts works on a wide range of products in various fields, including mobile security, through the evaluation of mobile payment applications, content protection solutions, and authentication systems.

These products are assessed according to evaluation frameworks such as EMVCo SBMP (Software-Based Mobile Payment), PCI 3DS, and PCI mPOC (Mobile Payments on COTS).

As a reinforcement to the technical team, you will participate in mobile security evaluation projects as well as R&D activities in this field (tool development, creation of new attack techniques).

You will analyze the software security of mobile and connected devices, particularly on Android and iOS platforms. This involves understanding how a product works, performing code reviews, and conducting penetration tests to identify potential vulnerabilities.

Your Profile

You have a degree in Computer Engineering (or equivalent), but most importantly, you have a hacker mindset and a passion for technical challenges.

You are curious, rigorous, and have a genuine interest in cybersecurity. You enjoy learning new things, staying updated on the latest developments, and evolving in the complex and stimulating field of security.

You have a good understanding of the Android and iOS mobile platforms or embedded Linux, along with their security models, as well as the associated programming languages (Java, C/C++, ARM and x86 assembly).

You are familiar with application reverse engineering and static and dynamic analysis tools. Knowledge of mobile security standards, state-of-the-art authentication mechanisms, cryptography, and countermeasures is highly desirable.

Fluency in technical English is essential.