Job
Description
General Tasks: You will consult and hands-on assist multiple teams in creating risk analyses (e.g. TARA) and performing Threat Modeling ( STRIDE) You will guide, teach, and train teams on how to create secure software architectures Actively adapting the software development process to benefit from modern tools to enhance security (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks) You will drive project decisions to roll out security measures You will actively check source code and configurations for potential security issues and guide/train development teams on how to prevent identified issues General required knowledge/Skills/Background: University degree in Computer Science or a similar field of study Professional experience in Threat Modeling (STRIDE), TARA and ISO 21434 Experience in security source code reviews and active vulnerability hunting Deep technical understanding of best-practice security features and internals of Linux and Android Strong understanding of Linux Kernel Security features (SELinux, Secure Boot, Namespaces, cgroups, seccomp, KASLR, Stack protector, dm-verity / IMA-EVM, ...) A background in modern software development in C++ / Java / Kotlin on Linux / Android The ability to motivate, influence and convince multiple worldwide teams; ideally with experience creating and performing security trainings Skills Must have skills : Linux, Android, security, SELinux, secure boot Should have skills : Namespaces, cgroups, seccomp, KASLR, Stack protector, dm-verity / IMA-EVM, c++, Java, Kotlin, TARA, STRIDE, fuzzing
