The Security Engineer will perform code reviews and vulnerability analyses for customer products, conduct penetration testing, support security evaluations, and improve internal processes. The role involves report writing and developing sophisticated attack methods while maintaining expertise in embedded software security.
RESPONSIBILITIES
- Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations.
- Customer code review: due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
- Based on the code review a vulnerability analysis has to be carried out, to determine if the customer product has any potential security weaknesses.
- Perform software penetration testing for evaluation with regards to reverse engineering (static and dynamic), protocol attacks, and developed malicious applications.
- Investigate possible logical attack scenarios. Provide support for the security evaluation engineers in charge of product testing - by interpreting the code review findings, orienting the attack paths and analyzing the test results.
- Formal report writing in line with customer and certification scheme requirements (EMVCo)
- Delivery of customer projects on time.
- Develop sophisticated, state-of-the-art attacks with tools and scripts by maintaining a high level of expertise in the latest attack methods against embedded products.
- Maintains/improves technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
- Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
QUALIFICATIONS
- Experience in Java development (including VM and API) on device side such as card (Payment, UICC) or smart phones.
- Familiar with GlobalPlatform Card Specification.
- Experience in payment application development with Java language and development applications.
ABOUT US
A global leader in applied safety science, UL Solutions (NYSE: ULS) transforms safety, security and sustainability challenges into opportunities for customers in more than 110 countries. UL Solutions delivers testing, inspection and certification services, together with software products and advisory offerings, that support our customers' product innovation and business growth. The UL Mark serves as a recognized symbol of trust in our customers' products and reflects an unwavering commitment to advancing our safety mission. We help our customers innovate, launch new products and services, navigate global markets and complex supply chains, and grow sustainably and responsibly into the future. Our science is your advantage.
Top Skills
Java
Similar Jobs at UL Solutions
Automotive • Professional Services • Software • Consulting • Energy • Chemical • Renewable Energy
The Senior Cybersecurity Advisor evaluates and enhances the security of network-connectable devices, providing technical guidance and support for IoT cybersecurity compliance. Responsibilities include collaborating with teams, assisting in project management, identifying industry trends, report writing, and continuous knowledge improvement in cybersecurity through workshops and publications.
Top Skills:
CybersecurityEmbedded SystemsIot
Automotive • Professional Services • Software • Consulting • Energy • Chemical • Renewable Energy
The Senior Security Evaluator evaluates IT products for security compliance with standards like Common Criteria. Responsibilities include conducting evaluations, performing audits, supporting penetration tests, writing formal reports, and improving internal processes. Requires experience in information security and knowledge of smartcard technology.
Top Skills:
Common CriteriaEmbedded SoftwareIso 27001
Automotive • Professional Services • Software • Consulting • Energy • Chemical • Renewable Energy
The Project Coordinator II is responsible for assisting in project management tasks, supporting project leads in executing and monitoring project phases, and helping ensure successful project delivery. This role involves coordination among different teams and stakeholders to facilitate effective communication and project execution.
What you need to know about the Edinburgh Tech Scene
From traditional pubs and centuries-old universities to sleek shopping malls and glass-paneled office buildings, Edinburgh's architecture reflects its unique blend of history and modernity. But the fusion of past and future isn't just visible in its buildings; it's also shaping the city's economy. Named the United Kingdom's leading technology ecosystem outside of London, Edinburgh plays host to major global companies like Apple and Adobe, as well as a growing number of innovative startups in fields like cybersecurity, finance and healthcare.
