TS Senior Security Analyst

Posted 13 April 2023
Salary 600-900 GBP per day DOE
LocationUnited Kingdom
Job type Contract
Discipline InfoSec & Cybersecurity
Contact NameRachel Ward

Job description

​My client is an international business specializing in applied safety science, they transform security, safety, and sustainability challenges into opportunities for customers worldwide.

They are looking for an experienced TS Senior Security Analyst (Embedded Systems/JavaCard) to evaluate the security of embedded products, such as payment cards, mobile devices, payment terminals, or e-Passports. This will include analysing embedded applications like products under evaluation, developing and realising high-level penetration tests, and supporting and training engineers for evaluation projects.

Responsibilities:

  • Support the Project Management team on evaluation scoping, resource requirements, certification body, and customer expectations

  • Customer code review: due to stringent confidentiality and security requirements, it often requires travelling to customer premises

  • Based on the code review a vulnerability analysis has to be carried out, to determine if the customer product has any potential security weaknesses

  • Perform software penetration testing for evaluation with regard to reverse engineering (static and dynamic), protocol attacks, and developed malicious applications

  • Investigate possible logical attack scenarios. Provide support for the security evaluation engineers in charge of product testing – by interpreting the code review findings, orienting the attack paths, and analyzing the test results

  • Formal report writing in line with customer and certification scheme requirements

  • Delivery of customer projects on time

  • Develop sophisticated, state-of-the-art attacks with tools and scripts by maintaining high expertise in the latest attack methods against embedded products


Qualifications:

  • Experience in Java development (including VM and API) on the device sides such as cards (Payment, UICC) or smartphones

  • Familiar with GlobalPlatform Card Specification

  • Experience in payment application development with Java language and development applications

  • Please note, candidates must be UK based, no sponsorship is on offer

    Apply today to be contacted with further information.