Security Engineer (m/w/d)

SYSGO AG; Saint-Germain-en-Laye; Hybride; EUR 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Mobile working

Company events

Résumé du poste

SYSGO AG invites a product security specialist to contribute to safety-critical embedded software development in Saint-Germain-en-Laye, Île-de-France. You will collaborate across teams to implement secure features and protect architectures while enabling secure-by-design processes.

Fluent English is required, and strong skills in C, Python, scripting, REST APIs, and data formats such as XML/JSON/YAML are valued.

Qualifications

• Experience with operating systems, embedded systems or safety-critical software.
• Strong knowledge of C, Python, Shell scripting; REST API and data formats such as XML/JSON/YAML.
• Exposure to security certifications (avionic, industrial automation, railway, automotive) is a plus.
• Fluent English with strong written and verbal communication skills.

Responsabilités

• Support specification and design of security features during product development.
• Assist in reviewing software architecture to ensure secure-by-design practices.
• Provide input to vulnerability scanning and analysis; generate vulnerability reports.
• Support security and penetration testing across product lines.

Description du poste

Your Tasks

Product Security Requirements

• Support the product development during the specification and design of security features
• Support the review of the software architecture and design to ensure a “secure by design” product development
• Participate and provide technical input to the vulnerability scanning and analysis and scoring process and generate vulnerability reports
• Support security and penetration testing of our product lines

Product Certification

• Contribute to security certification work: Helpmanaging and improving certification evidences
• Support tracking of certification maintenance and re-certification activities

Tool Development and Maintenance

• Support the specification development and maintenance of automated external (CVE) and internal (Jira) vulnerability issue monitoring tools
• Integration of SBOM generation tools into the CI/CD pipeline
• Support the selection, configuration and integration of code analysis tools

Your Profile

• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Strong knowledge of the ‘C’ programming language as well as Python, Shell scripting, tool interactions via REST API and various data formals like XML, Json or YAML
• Exposure to security certifications, e.g., in the avionic, industrial automation, railway or automotive is a plus
• Strong verbal and written communication skills, fluent English is a must

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events