Senior Security Analyst (Embedded Software)

JOB DESCRIPTION
The Senior Security Analyst will evaluate the security of embedded products, such as payment cards, mobile devices, payment terminals or e-passports. This will include the analysis of embedded applications like products under evaluation, the development and the realization of high-level penetration tests, and the support and training of engineers for evaluation projects. The Senior Security Analyst (Embedded Software) also works on the security of software applications.
RESPONSIBILITIES

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations.
• Customer code review: due to stringent confidentiality and security requirements, it often requires travelling to customer premises.
• Based on the code review a vulnerability analysis has to be carried out, to determine if the customer product has any potential security weaknesses.
• Perform software penetration testing for evaluation regarding reverse engineering (static and dynamic), protocol attacks, and developed malicious applications.
• Investigate possible logical attack scenarios. Support the security evaluation engineers in charge of product testing - by interpreting the code review findings, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements (EMVCo)
• Delivery of customer projects on time.
• Develop sophisticated, state-of-the-art attacks with tools and scripts by maintaining high expertise in the latest attack methods against embedded products.
• Maintains/improves technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.

QUALIFICATIONS

• Experience in Javacard development (including VM and API)
• Familiar with GlobalPlatform Card Specification.
• Experience in application development with Java language and development applications.
• Experience in evaluating GP-based open platform

Mission: For UL Solutions, corporate and social responsibility isn't new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply ingrained in everything we do. You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
People: Ask any UL Solutions employee what they love most about working here, and you'll almost always hear, "the people". Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results.
Interesting work: Your work at UL Solutions will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles, you will get international experience working with colleagues around the world.
Grow & achieve: Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.
Working at UL Solutions is an exciting journey that twists and turns daily. We thrive in the twists and revel in the turns. This is our every day. This is our normal.
Curious? To learn more about us and the work we do, visit our company page https://www.ul.com/
#LI-SG1