Product Security Analyst

PQShield; United Kingdom; Remote; GBP 50,000 - 80,000; Full time

Job summary

PQShield is seeking a Product Security Analyst to enhance its product security team, focusing on embedded software. The role involves building fuzzing infrastructure, integrating tests, and requires a degree in a relevant field with at least 3 years of experience. Join a rapidly growing startup in the semiconductor industry, where you'll work closely with founders and have significant career progression opportunities.

Benefits

Accelerated career development

Collaborative team environment

Competitive salary and share options

Flexible and hybrid working

Private health insurance

25 days annual leave plus bank holidays

Qualifications

• 3+ years of experience as a vulnerability analyst focused on embedded software security.
• Knowledge of setting up fuzzing campaigns.
• Degree in Electrical Engineering or Computer Science.

Responsibilities

• Build and maintain the fuzzing infrastructure.
• Set up fuzzing tests and maintain coverage.
• Collaborate with engineering for integration of fuzzing tests.

Skills

Communication

Quality Engineering

Embedded Software Security

Fuzzing Campaigns

Programming (C, Assembly)

Version Control (Git)

Simulation Tools (QEMU)

Education

Degree in Electrical Engineering

Degree in Computer Science

Tools

Bash

CMake

Makefiles

Job description

Location: Remote (within the countries we operate in); Belgium, Netherlands, Spain, France, Germany, UK. Some travel to our offices will be required from time-to-time

Department: Product

Product Security Analyst - Software

Reports to: Lead Product Security Analyst

Department: Product

About the role

PQShield is looking for a software security expert with a focus on embedded software to expand our product security team. Candidates should have a degree in Electronic Engineering/Computer Science or equivalent. We hope that you have at least 3 years of experience, but also an open, research-oriented mindset.

We have been established since 2018, so you would be directly working with the founders and inventors of this deep tech startup. This is a great opportunity for career progression and to make an immediate impact in a rapidly expanding segment of the semiconductor industry (Post-Quantum Cryptography and RISC-V).

️ What you’ll be doing

• Build and maintain the fuzzing infrastructure within the company.
• Set up fuzzing tests and maintain coverage of our different pure software and hardware / software co-design IPs.
• Provide feedback to architects and engineers on resistance to micro-architectural attacks.
• Collaborate with engineering to integrate fuzzing tests in their continuous-integration flows.

Required Skills And Qualifications

• Excellent written and verbal communication skills.
• A commitment to high quality engineering in all areas of their work, including advocating for the best long-term solutions over the easiest or quickest.
• 3+ years of experience working as a vulnerability analyst with a focus on embedded software security.
• Knowledge of setting up fuzzing campaigns.
• Degree in Electrical Engineering, Computer Science or related field.
• Version control using Git.
• Programming languages for embedded platforms such as C and assembly.
• Confidence using tools like Bash, CMake and Makefiles safely and sensibly.
• Simulation tools like QEMU.

Preferred Skills And Qualifications

• Experience architecting, implementing and deploying fuzzing campaigns.
• Knowledge of micro-architectural effects on different embedded platforms.
• Knowledge of post-quantum cryptography standards.
• Experience verifying security properties, and/or cryptographic IPs.
• Knowledge of Industry standard SoC Security Architectures
• Experience working on secure element or smart cards designs.
• Experience using Gitlab CI, or otherwise principles of continuous integration and testing.

Some of the perks of working with us:

• Unparalleled opportunities to learn and accelerated career development.
• A collaborative, team environment with people who truly love what they do.
• Competitive salary and share option scheme.
• Flexible and hybrid working, and a working from home budget.
• Private health insurance for yourself and your family.
• 25 days annual leave (plus bank holidays and two wellness weeks).
• The chance to work with a spirited, smart, and friendly team!

PQShield is an Equal Employment Opportunity employer. We’re passionate about talent and proud to foster an inclusive environment; all applicants will be considered regardless of their gender identity, ethnicity, sexual orientation, disability, and age.