Mobile Security Evaluation Engineer — Android & iOS

SERMA Safety and Security; Chevanceaux; Sur place; EUR 55 000 - 90 000; Plein temps

Résumé du poste

SERMA Safety and Security is seeking a mobile security specialist to join its Security Laboratory in France. You will participate in mobile security evaluation projects, review code, and perform penetration tests on Android and iOS platforms.

You will contribute to R&D activities, tool development, and the creation of new attack techniques, applying security standards such as EMVCo SBMP and PCI. Fluency in technical English is essential.

Qualifications

• Degree in Computer Engineering or equivalent.
• Hacker mindset and passion for technical challenges.
• Curious, rigorous, and genuinely interested in cybersecurity.
• Good understanding of Android and iOS platforms or embedded Linux and their security models, plus programming languages (Java, C/C++, ARM and x86 assembly).
• Familiar with application reverse engineering and static/dynamic analysis tools.
• Knowledge of mobile security standards, authentication mechanisms, cryptography, and countermeasures is highly desirable.
• Fluency in technical English is essential.

Responsabilités

• Analyze the software security of mobile and connected devices.
• Perform code reviews and penetration testing on Android and iOS.
• Participate in R&D activities; develop tools and new attack techniques.

Connaissances

Hacker mindset

Curious

Rigorous

Android security

iOS security

Embedded Linux

Java

C/C++

ARM Assembly

x86 Assembly

Reverse engineering

Static analysis

Dynamic analysis

Cryptography

Countermeasures

English fluency

Formation

Computer Engineering degree

Description du poste

SERMA Safety and Security is seeking a mobile security specialist to join its Security Laboratory in France. You will participate in mobile security evaluation projects, review code, and perform penetration tests on Android and iOS platforms.

You will contribute to R&D activities, tool development, and the creation of new attack techniques, applying security standards such as EMVCo SBMP and PCI. Fluency in technical English is essential.