Security Specialist

General Tasks:

• You will consult and hands-on assist multiple teams in creating risk analyses (e.g. TARA) and performing Threat Modeling ( STRIDE)
• You will guide, teach, and train teams on how to create secure software architectures
• Actively adapting the software development process to benefit from modern tools to enhance security (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks)
• You will drive project decisions to roll out security measures
• You will actively check source code and configurations for potential security issues and guide/train development teams on how to prevent identified issues

General required knowledge/Skills/Background:

• University degree in Computer Science or a similar field of study
• Professional experience in Threat Modeling (STRIDE), TARA and ISO 21434
• Experience in security source code reviews and active vulnerability hunting
• Deep technical understanding of best-practice security features and internals of Linux and Android
• Strong understanding of Linux Kernel Security features (SELinux, Secure Boot, Namespaces, cgroups, seccomp, KASLR, Stack protector, dm-verity / IMA-EVM, ...)
• A background in modern software development in C++ / Java / Kotlin on Linux / Android
• The ability to motivate, influence and convince multiple worldwide teams; ideally with experience creating and performing security trainings