Senior Product Security Analyst - Software
Reports to: Lead Product Security Analyst
Department: Product
Please note: While we are currently hiring for one position within our Product Security team, we are open to considering candidates at both mid and senior levels. This advert reflects a more senior scope, but we welcome applications from strong Product Security Analysts who may not yet meet every requirement at the senior level.
💼 About the role
PQShield is looking for an experienced software security expert with a focus on embedded software to expand our product security team. Candidates should have a degree in Electronic Engineering/Computer Science or equivalent. We hope that you have at least 7 years of experience, but also an open, research-oriented mindset.
We have been established since 2018, so you would be directly working with the founders and inventors of this deep tech startup. This is a great opportunity for career progression and to make an immediate impact in a rapidly expanding segment of the semiconductor industry (Post-Quantum Cryptography and RISC-V).
⚒️ What you’ll be doing
- Build and maintain the fuzzing infrastructure within the company.
- Set up fuzzing tests and maintain coverage of our different pure software and hardware / software co-design IPs.
- Ensure our cryptography implementations do not leak any secret information due to micro-architectural issues.
- Provide feedback to architects and engineers on resistance to micro-architectural attacks.
- Collaborate with engineering to integrate fuzzing and constant-time tests in their continuous-integration flows.
- Conduct research into micro-architectural attack techniques and countermeasures on post-quantum cryptography algorithms.
🎯 Required Skills And Qualifications
- Excellent written and verbal communication skills.
- A commitment to high quality engineering in all areas of their work, including advocating for the best long-term solutions over the easiest or quickest.
- 7+ years of experience working as a vulnerability analyst with a focus on embedded software security.
- Knowledge of micro-architectural effects on different embedded platforms.
- Knowledge of setting up fuzzing campaigns.
- Knowledge of post-quantum cryptography standards.
- Degree in Electrical Engineering, Computer Science or related field.
🖥️ Specific Technologies You Are Confident Using
- Version control using Git.
- Programming languages for embedded platforms such as C and assembly.
- Confidence using tools like Bash, CMake and Makefiles safely and sensibly.
- Simulation tools like QEMU.
👍 Preferred Skills And Qualifications
- Experience architecting, implementing and deploying fuzzing campaigns.
- Experience verifying security properties, and/or cryptographic IPs.
- Knowledge of Industry standard SoC Security Architectures
- Experience working on secure element or smart cards designs.
- Experience using Gitlab CI, or otherwise principles of continuous integration and testing.
🏆Some of the perks of working with us:
- Unparalleled opportunities to learn and accelerated career development.
- A collaborative, team environment with people who truly love what they do.
- Competitive salary and share option scheme.
- Flexible and hybrid working, and a working from home budget.
- Private health insurance for yourself and your family.
- 25 days annual leave (plus bank holidays and two wellness weeks).
- 50% gym membership discount.
- The chance to work with a spirited, smart, and friendly team!
PQShield is an Equal Employment Opportunity employer. We’re passionate about talent and proud to foster an inclusive environment; all applicants will be considered regardless of their gender identity, ethnicity, sexual orientation, disability, and age.
