Security Engineer (m/w/d)

LesJeudis; Saint-Germain-en-Laye; Hybride; EUR 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Mobile working

Tutor & intro week

Training opportunities

Company events

Résumé du poste

SYSGO, a leading European embedded software company, seeks a product security professional to assist in feature specification, design reviews, and vulnerability analysis across PikeOS and ELinOS projects. You will contribute to security certification efforts and integrate SBOM tools into CI/CD pipelines, ensuring compliance with safety certifications.

You will collaborate with cross-functional teams to assess OS and embedded systems security, perform scans, generate reports, and support

Qualifications

• Strong knowledge of operating systems and embedded safety/security critical software.
• Proficiency in C and Python with scripting abilities and data formats like XML/JSON/YAML.
• Experience with REST API and tool interactions in CI/CD environments.

Responsabilités

• Support specification and design of security features during product development.
• Assist in secure-by-design reviews of software architecture and design.

Connaissances

Embedded systems

C programming

Python

Shell scripting

REST API

XML/JSON

Outils

Jira

SBOM tools

CI/CD

Description du poste

Your Tasks

Product Security Requirements

• Support the product development during the specification and design of security features
• Support the review of the software architecture and design to ensure a "secure by design" product development
• Participate and provide technical input to the vulnerability scanning and analysis and scoring process and generate vulnerability reports
• Support security and penetration testing of our product lines

Product Certification

• Contribute to security certification work: Help managing and improving certification evidences
• Support tracking of certification maintenance and re-certification activities

Tool Development and Maintenance

• Support the specification development and maintenance of automated external (CVE) and internal (Jira) vulnerability issue monitoring tools
• Integration of SBOM generation tools into the CI/CD pipeline
• Support the selection, configuration and integration of code analysis tools

Your Profile

• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Strong knowledge of the 'C' programming language as well as Python, Shell scripting, tool interactions via REST API and various data formals like XML, Json or YAML
• Exposure to security certifications, e.g., in the avionic, industrial automation, railway or automotive is a plus
• Strong verbal and written communication skills, fluent English is a must

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events

SYSGO is the leading European manufacturer of embedded software solutions, specializing in the development of Safety- & Security-critical applications since 1991. Following the motto "Safe & Secure by Design," the company develops PikeOS and ELinOS.

The PikeOS RTOS & Hypervisor meets Common Criteria EAL 5+ certification and is certified according to the highest Safety standards such as DO-178C, IEC 61508, EN 50128 / EN 50657, or ISO 26262. ELinOS is our embedded Linux distribution equipped with a user-friendly IDE and comes with a selection of software packages to meet customer needs.

SYSGO collaborates closely with customers such as Airbus, Thales, or Continental throughout the entire product life cycle, providing support for the formal certification of software according to international standards. Headquartered in Klein-Winternheim near Frankfurt, SYSGO has offices in Rostock and Ulm, France, the Czech Republic, and the UK, maintaining a global distribution network.

The company is certified according to ISO 9001:2015 and DIN EN ISO/IEC 27001:2017 and is a part of the European Thales Group.