iOS (Senior) Mobile Security Analyst

Keysight Technologies; Delft; On-site; EUR 70,000 - 110,000; Full time

Job summary

Keysight Technologies – Riscure Security Solutions is seeking security professionals with a background in iOS/mobile payments and EMVCo/PCI MPoC certifications. The role focuses on MPoC and EMVCo evaluations, mobile software security testing, and cryptographic analyses for international clients across semiconductor, automotive, and financial sectors.

The team emphasizes an open, transparent environment and ownership, with opportunities to grow in various standards and programs while interacting

Qualifications

• Knowledge of iOS or Android security architecture.
• Professional experience with mobile (penetration) testing: rooting/jailbreaking devices, instrumentation, bypassing protections, static and dynamic analysis of mobile apps.
• Experience with software protection technologies.
• Professional experience with security architecture and high-level design review.
• Professional experience with source code review.
• Knowledge of cryptography and key management concepts.
• Knowledge of information security and risk management concepts.

Responsibilities

• In interdisciplinary role work on MPoC and EMVCo evaluations.
• Mobile software testing, security architecture analysis, and source code/documentation review.
• Research novel adversarial techniques and attack paths in mobile payments context.

Skills

iOS/Android security architecture

Mobile penetration testing

Rooting/Jailbreaking

Instrumentation

Static analysis

Dynamic analysis

Cryptography concepts

Information security concepts

Risk management concepts

Security evaluations (EMVCo/PCI MPoC)

Job description

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

We are looking for security professionals with a background in iOS operating system, in mobile payments and with experience with PCI and EMVCo certification programs.

Keysight Technologies – Riscure Security Solutions – is an ambitious organization. We specialize in security testing for leading international clients, including:

• Semiconductor manufacturers
• PayTV service providers
• Automotive manufacturers.

Our head office in the Netherlands has been around since 2001, and we have satellite offices in San Francisco, California and in Shanghai, China.

We work on engaging international projects, in a challenging yet open and transparent work environment based on our core values:

• Sharing knowledge
• Feeling at home
• Proactively taking ownership

Responsibilities

In this interdisciplinary role you will be working on MPoC and / or EMVCo evaluations. This includes activities like mobile software (penetration) testing, security architecture analysis, source code and documentation review.

Your role also includes research into novel adversarial techniques and attack paths in the context of mobile payments.

Qualifications

We are looking for candidates with the following profile:

• Knowledge of iOS or Android security architecture.
• Professional experience with mobile (penetration) testing: rooting/jailbreaking devices, using instrumentation, bypassing protections, static and dynamic analysis of mobile applications, etc.
• Experience with software protection technologies.
• Professional experience with security architecture and high-level design review.
• Professional experience with source code review.
• Knowledge of cryptography and key management concepts like symmetric and asymmetric crypto, hash functions, confidentiality, integrity, and authenticity.
• Knowledge of information security and risk management concepts.

Nice to have:

• 3+ years’ experience and knowledge on iOS operating system
• Knowledge of Payment transaction security (e.g., PIN protection, key management and EMV transactions).
• Experience with working on security evaluations (preferably EMVCo and / or PCI MPoC) in an international setting.
• Experience within customer-facing roles.
• An interest in the growing mobile payments landscape and associated threats and implications.

What do we expect from you on top of the previously mentioned technical qualifications

• Excellent English communications skills (writing and speaking).
• Ability to quickly distill important information from vendor documentation.
• Ability to keep an overview of large reports.
• Ability to execute security evaluations based on specifications of various programs with the option to grow in other standards and programs.
• Interact and align with customers and stakeholders.