Application Security Engineer

  • Full-time

Company Description

Who we are...

Trustonic was formed in 2012 as a joint venture between industry heavyweights with strong pedigree in the secure chip design and digital security sectors. We are now part of the EMK Capital Portfolio.

Our technology gives our customers the confidence to manage risk.   We embed security into smart devices and connected cars, for businesses to innovate and embrace new opportunities with peace of mind.

Over 2 billion devices are protected by Trustonic, and provide secure solutions for the mobile, automotive and banking & payments industries. 

We empower telecom operators to manage the lifecycle of smartphones, we secure the connected car of today, laying the foundation for future self-driving vehicles and we are the security backbone of any digital transaction from a mobile device.

Our partners include the leading device, silicon, enterprise, identity and commerce companies.

If you would like to work in a fast-moving global technology company, with great ambition, then we’d love to hear from you!

Job Description

We are looking for an Application Security Engineer to join our Engineering team at Trustonic. Based in our offices in Sophia, with responsibility for Mobile and Automotive Customers, you will be part of a team responsible for working with wider internal teams to develop and integrate our Security Solution products to customers platforms.

A bit about the team and what you'll deliver...

The Application Security Engineer is part of a project team that addresses advanced technology topics, Trustonic Security Services implementation and integration projects of these products features inside our Client's SoC platforms.

As an Application Security Engineer, you will: 

  • Know and understand standard Security applications (OpenSSL, Linux System Security, Crypto stacks)
  • Develop and Integrate Trustonic Security Products (KeyStore like, TLS extensions) on different platforms (Android, Linux, QnX)
  • deliver Embedded / System software development, debug and tests (System libraries, Kernel drivers, TEE or OS Features)

Who you are...

As an Application Security Engineer, you will be:

  • Team player
  • Able to thrive in a dynamic, constantly evolving, small team environment
  • Organised, rigorous and autonomous
  • Customer and business oriented
  • Prepared to invest whatever effort is required to get the job done
  • Tenacious with a problem solving approach
  • Good relationship with team and clients
  • Good creative intelligence (design and conceptualization)
  • Operate in integrity and transparency and conduct business in a proper manner

Qualifications

  • A degree in computer science, software engineering, or equivalent experience 

Languages

  • Fluent English, both written and spoken

Additional Information

What makes you, you...

  • At least 2 years of experience in software development
  • Knowledge required in standard Security applications
    • OpenSSL or other Crypto stacks (MBed, TomCrypt, BoringSSL...)
    • TLS, PKCS, PKI, X509, ASN.1, DER, CBOR/COSE
    • Good understanding of Cryptographic mechanisms (signature, encryption, authentication, digests, macs...)
  • Experience in Embedded System:
    • Familiar with Linux development
    • Knowledge in Mobile OSs and associated tools chains; Android, Linux, feature phones (RTOS), others...
    • Knowledge in Embedded Software debugging (RAM dumps, traces capture and analysis, Lauterbach tool)
  • Knowledge in scripts based automated tests suites
  • Knowledge in Stacks, Drivers, Linux Kernel, DRMs, Memory Firewalling, Open source do’s and don’ts (Git, SW Licenses) are definitely also advantages
  • Integration projects (platform bring-up, crypto stack or system middle integration)

Technical skills: 

  • C / C++
  • Knowledge in Security (Crypto algos, TLS)
  • Linux System development
  • BSP manipulation (Android, Linux)
  • Technically extremely autonomous (able to autonomously learn and discover code in an external BSP)

Desirable Skills 

  • Experience with Linux build systems (Yocto, BuildRoot)
  • Experience with low level system development (kernel Drivers, firmware)
  • Experience in DRMs
  • Python

Trustonic is an equal opportunity employer.  We do not discriminate on any grounds. We empower, engage, enable and value differences between people, including; different races, ethnicities, genders, ages, religions, disabilities and sexual orientations, with differences in education, backgrounds, skill sets, experiences and knowledge.

Trustonic is an equal opportunity employer.  We do not discriminate on any grounds. We empower, engage, enable and value differences between people, including; different races, ethnicities, genders, ages, religions, disabilities and sexual orientations, with differences in education, backgrounds, skill sets, experiences and knowledge.