Mobile Cybersecurity Evaluation Engineer W/M

The Security Laboratory provides evaluation and expertise services in information security. Its core business: identifying and exploiting security vulnerabilities in products or systems entrusted to us by our clients.

As certified “hackers” approved by ANSSI (the French National Cybersecurity Agency), our team of experts works on a wide range of products in various fields, including mobile security, through the evaluation of mobile payment applications, content protection solutions, and authentication systems.

These products are assessed according to evaluation frameworks such as EMVCo SBMP (Software-Based Mobile Payment), PCI 3DS, and PCI mPOC (Mobile Payments on COTS).

As a reinforcement to the technical team, you will participate in mobile security evaluation projects as well as R&D activities in this field (tool development, creation of new attack techniques).

You will analyze the software security of mobile and connected devices, particularly on Android and iOS platforms. This involves understanding how a product works, performing code reviews, and conducting penetration tests to identify potential vulnerabilities.

Your Profile

You have a degree in Computer Engineering (or equivalent), but most importantly, you have a hacker mindset and a passion for technical challenges.

You are curious, rigorous, and have a genuine interest in cybersecurity. You enjoy learning new things, staying updated on the latest developments, and evolving in the complex and stimulating field of security.

You have a good understanding of the Android and iOS mobile platforms or embedded Linux, along with their security models, as well as the associated programming languages (Java, C/C++, ARM and x86 assembly).

You are familiar with application reverse engineering and static and dynamic analysis tools. Knowledge of mobile security standards, state-of-the-art authentication mechanisms, cryptography, and countermeasures is highly desirable.

Fluency in technical English is essential.