Product Security Analyst

Product Security Analyst

Full-Time 43200 - 72000 € / year (est.) Home office (partial)
PQShield

At a Glance

  • Tasks: Join us as a Product Security Analyst, focusing on embedded software security and fuzzing infrastructure.
  • Company: PQShield is a pioneering deep tech startup in post-quantum cryptography and RISC-V.
  • Benefits: Enjoy flexible working, private health insurance, 25 days leave, and a share option scheme.
  • Other info: Work remotely across Europe with occasional office visits; we value diversity and inclusion.
  • Why this job: Make an immediate impact in a rapidly growing industry while collaborating with passionate experts.
  • Qualifications: 3+ years in vulnerability analysis, degree in Engineering/Computer Science, and strong communication skills.

The predicted salary is between 43200 - 72000 € per year.

Location: Remote (within the countries we operate in); Belgium, Netherlands, Spain, France, Germany, UK. Some travel to our offices will be required from time-to-time

Department: Product

Product Security Analyst - Software

Reports to: Lead Product Security Analyst

Department: Product

About the role

PQShield is looking for a software security expert with a focus on embedded software to expand our product security team. Candidates should have a degree in Electronic Engineering/Computer Science or equivalent. We hope that you have at least 3 years of experience, but also an open, research-oriented mindset.

We have been established since 2018, so you would be directly working with the founders and inventors of this deep tech startup. This is a great opportunity for career progression and to make an immediate impact in a rapidly expanding segment of the semiconductor industry (Post-Quantum Cryptography and RISC-V).

What you’ll be doing

  • Build and maintain the fuzzing infrastructure within the company.
  • Set up fuzzing tests and maintain coverage of our different pure software and hardware / software co-design IPs.
  • Provide feedback to architects and engineers on resistance to micro-architectural attacks.
  • Collaborate with engineering to integrate fuzzing tests in their continuous-integration flows.

Required Skills And Qualifications

  • Excellent written and verbal communication skills.
  • A commitment to high quality engineering in all areas of their work, including advocating for the best long-term solutions over the easiest or quickest.
  • 3+ years of experience working as a vulnerability analyst with a focus on embedded software security.
  • Knowledge of setting up fuzzing campaigns.
  • Degree in Electrical Engineering, Computer Science or related field.
  • Version control using Git.
  • Programming languages for embedded platforms such as C and assembly.
  • Confidence using tools like Bash, CMake and Makefiles safely and sensibly.
  • Simulation tools like QEMU.

Preferred Skills And Qualifications

  • Experience architecting, implementing and deploying fuzzing campaigns.
  • Knowledge of micro-architectural effects on different embedded platforms.
  • Knowledge of post-quantum cryptography standards.
  • Experience verifying security properties, and/or cryptographic IPs.
  • Knowledge of Industry standard SoC Security Architectures
  • Experience working on secure element or smart cards designs.
  • Experience using Gitlab CI, or otherwise principles of continuous integration and testing.

Some of the perks of working with us:

  • Unparalleled opportunities to learn and accelerated career development.
  • A collaborative, team environment with people who truly love what they do.
  • Competitive salary and share option scheme.
  • Flexible and hybrid working, and a working from home budget.
  • Private health insurance for yourself and your family.
  • 25 days annual leave (plus bank holidays and two wellness weeks).
  • The chance to work with a spirited, smart, and friendly team!


PQShield is an Equal Employment Opportunity employer. We’re passionate about talent and proud to foster an inclusive environment; all applicants will be considered regardless of their gender identity, ethnicity, sexual orientation, disability, and age.

#J-18808-Ljbffr

Product Security Analyst employer: PQShield

PQShield is an exceptional employer that offers unparalleled opportunities for learning and career development in the rapidly evolving field of post-quantum cryptography. With a collaborative work culture, competitive salary, flexible working arrangements, and comprehensive health benefits, employees are empowered to make a meaningful impact while enjoying a supportive environment. Join a spirited team where your contributions are valued and growth is encouraged, all from the comfort of your home or at one of our offices across Europe.

PQShield

Contact Detail:

PQShield Recruiting Team

StudySmarter Expert Advice🤫

We think this is how you could land Product Security Analyst

Tip Number 1

Familiarise yourself with the latest trends in post-quantum cryptography and RISC-V architecture. This knowledge will not only help you stand out during interviews but also demonstrate your genuine interest in the field.

Tip Number 2

Engage with online communities or forums related to embedded software security and fuzzing. Networking with professionals in these spaces can provide valuable insights and potentially lead to referrals.

Tip Number 3

Prepare to discuss specific projects where you've implemented fuzzing campaigns or worked on embedded software security. Real-world examples will showcase your expertise and problem-solving skills effectively.

Tip Number 4

Research PQShield's products and recent developments. Being knowledgeable about our work will allow you to ask insightful questions during the interview, showing that you're proactive and genuinely interested in joining our team.

We think you need these skills to ace Product Security Analyst

Embedded Software Security
Fuzzing Campaign Setup
Vulnerability Analysis
Micro-Architectural Attack Resistance
Continuous Integration (CI)
Version Control with Git
Programming in C and Assembly

Some tips for your application 🫡

Tailor Your CV:Make sure your CV highlights relevant experience in embedded software security and vulnerability analysis. Emphasise your skills in fuzzing campaigns, programming languages like C, and any experience with tools such as Git and QEMU.

Craft a Strong Cover Letter:Write a cover letter that showcases your passion for product security and your commitment to high-quality engineering. Mention specific projects or experiences that demonstrate your ability to advocate for long-term solutions.

Highlight Communication Skills:Since excellent written and verbal communication skills are essential for this role, provide examples in your application of how you've effectively communicated complex technical concepts to non-technical stakeholders.

Showcase Continuous Learning:Demonstrate your research-oriented mindset by mentioning any recent courses, certifications, or self-study related to post-quantum cryptography or embedded systems. This shows your commitment to staying updated in the field.

How to prepare for a job interview at PQShield

Showcase Your Technical Expertise

Be prepared to discuss your experience with embedded software security and fuzzing campaigns. Highlight specific projects where you've successfully implemented security measures or conducted vulnerability analyses.

Communicate Clearly

Since excellent written and verbal communication skills are essential for this role, practice explaining complex technical concepts in a simple manner. This will demonstrate your ability to collaborate effectively with engineers and architects.

Demonstrate a Research-Oriented Mindset

Emphasise your commitment to continuous learning and staying updated on the latest trends in post-quantum cryptography and micro-architectural attacks. Share examples of how you've applied new knowledge to improve security practices.

Prepare Questions About Company Culture

PQShield values a collaborative environment, so come prepared with questions that show your interest in their team dynamics and culture. Ask about their approach to career development and how they support employees in their growth.