Mobile Security Analyst

Keysight Technologies; Delft; On-site; EUR 70,000 - 110,000; Full time

Job summary

Keysight Technologies in the Netherlands seeks security professionals with a background in mobile payments and PCI/EMVCo experience to join our MPoC/EMVCo evaluation team.

You will conduct mobile software security testing, architecture analysis, and code/documentation review, while researching novel attack techniques in the context of mobile payments and engaging with international clients.

Qualifications

• Knowledge of Android or iOS security architecture.
• Experience with mobile (penetration) testing: rooting devices, instrumentation, bypassing protections, static/dynamic analysis.
• Experience with software protection technologies.
• Experience with security architecture and high-level design review.
• Experience with source code review.
• Knowledge of cryptography and key management concepts (symmetric/asymmetric, hash functions, confidentiality, integrity, authenticity).
• Knowledge of information security and risk management concepts.

Responsibilities

• Work on MPoC and/or EMVCo evaluations.
• Mobile software security testing, security architecture analysis, source code and documentation review.
• Research into novel adversarial techniques and attack paths in mobile payments.

Skills

Android security

iOS security

Mobile pentesting

Software protection

Security architecture review

Source code review

Cryptography basics

Information security risk

Job description

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

Responsibilities

We are looking for security professionals with a background in mobile payments and experience with PCI and EMVCo certification programs.

Keysight Technologies – Riscure Security Solutions – is an ambitious organization. We specialize in security testing for leading international clients, including:

• Semiconductor manufacturers
• PayTV service providers
• Automotive manufacturers.

We work on engaging international projects, in a challenging yet open and transparent work environment based on our core values:

• Sharing knowledge
• Feeling at home
• Proactively taking ownership

In this interdisciplinary role you will be working on MPoC and / or EMVCo evaluations. This includes activities like mobile software (penetration) testing, security architecture analysis, source code and documentation review.

Your role also includes research into novel adversarial techniques and attack paths in the context of mobile payments.

Qualifications

• Knowledge of Android or iOS security architecture.
• Experience with mobile (penetration) testing: rooting devices, using instrumentation, bypassing protections, static and dynamic analysis of mobile applications, etc.
• Expeirence with software protection technologies.
• Experience with security architecture and high-level design review.
• Experience with source code review.
• Knowledge of cryptography and key management concepts like symmetric and asymmetric crypto, hash functions, confidentiality, integrity, and authenticity.
• Knowledge of information security and risk management concepts.

Nice to have:

• Knowledge of Payment transaction security (e.g., PIN protection, key management and EMV transactions).
• Experience with working on security evaluations (preferably EMVCo and / or PCI MPoC) in an international setting.
• Experience with working in customer-facing roles.
• An interest in the growing mobile payments landscape and associated threats and implications.

What do we expect from you on top of the previously mentioned technical qualifications:

• Excellent English communications skills (writing and speaking).
• Ability to quickly distill important information from vendor documentation.
• Ability to keep an overview of large reports.
• Ability to execute security evaluations based on specifications of various programs with the option to grow in other standards and programs.
• Interact and align with customers and stakeholders.