SGS Brightsight is the world’s largest independent security evaluation lab, with accredited facilities across the globe. Our teams in Delft (The Netherlands), Barcelona and Madrid (Spain), Meyreuil (France), Beijing, Shanghai and Guangzhou (China), Singapore, and the USA are dedicated to helping companies ensure their products comply with the latest security regulations and requirements. With over 35 years of experience in evaluating IT products across various industries, we work at the forefront of security, evaluating products against stringent governmental and private standards.
At SGS Brightsight, our knowledge-driven environment is powered by professionals from diverse technical backgrounds. We pride ourselves on fostering an open, ambitious, and international atmosphere that values continuous growth. More information about our work can be found at SGS Brightsight: Security Evaluation Lab.
Job DescriptionWe are seeking a Software Developer to design, develop, and maintain security attack test benches used to evaluate the resilience of software, embedded systems, networks, and connected products against cybersecurity threats. The test systems focus on side-channel analysis, fault injection testing, and security protocol validation for secure products and cryptographic implementations.
Gather the product requirements
The engineer will analyze the existing test bench architecture, interact directly with users (security evaluators and researchers), and translate operational needs into new features and functional requirements.
Develop new features
The developer will translate defined requirements and system specifications into robust, maintainable, and efficient Java code, ensuring proper integration within the existing architecture. This includes extending and modifying system components, integrating new lab instruments into the tool, developing new modules, and delivering features that meet user needs while adhering to established coding standards, software engineering best practices, and quality expectations.
In addition, the developer will use the C programming language to design and implement secure test applications running on the evaluated products or other hardware components.
Validate the product release
The developer will also be responsible for extending, executing and validating tests on the test bench product to ensure that implemented features meet functional, performance, and security requirements.
The developer will create and maintain CI/CD scripts and pipelines to automate build, integration, testing, and deployment processes, ensuring consistent software delivery abd improved reliability.
Document the changes
The developer will also be responsible for documenting system requirements, software architecture, and technical specifications in a clear and structured manner. This includes maintaining up-to-date documentation of the existing test bench architecture, capturing design decisions, and ensuring that newly defined features and functional requirements are properly specified and traceable.
QualificationsBachelor's or Master's degree in Computer Science, Software Engineering, or related field.
Proactive attitude with a strong motivation to learn about cybersecurity analysis and attack techniques
Strong programming skills in:
Java
C (for microcontrollers and RTOS)
Experience with Maven
Experience building and maintaining Swing-based UI components
Experience with Windows and Linux-based development environments.
Experience and motivation to work with protocols and byte-level programming
Experience with version control systems such as Git.
Desired Skills
Familiarity with penetration testing concepts and vulnerability assessment.
Knowledge of cybersecurity testing methodologies
Familiarity with penetration testing concepts and vulnerability assessment.
Knowledge of secure coding practices and threat modeling.
Experience working with NetBeans Platform framework
Experience working with Java Native Interface
Experience communicating with lab instruments
Smartcard / NFC knowledge
Docker, virtualization, or cloud environments.
Fuzz testing, Fault injection and Side channel attacks implementation
Working knowledge of common cryptography algorithms such as AES, DES, RSA, SHA, etc.
Experience working with CUDA/GPU Computing
Programming skills in:
Python
Go or Rust
The field of security evaluation is very broad, constantly on the move, and very exciting. We look forward to welcoming you to our team!
Skills Required
- Bachelor's or Master's degree in Computer Science, Software Engineering, or a related field
- Strong programming skills in Java
- Strong programming skills in C for microcontrollers and RTOS
- Experience with Maven
- Experience building and maintaining Swing-based UI components
- Experience with Windows and Linux development environments
- Experience working with protocols and byte-level programming
- Experience with version control systems such as Git
- Motivation to learn cybersecurity analysis and attack techniques
- Familiarity with penetration testing and vulnerability assessment
- Knowledge of cybersecurity testing methodologies
- Knowledge of secure coding practices and threat modeling
- Experience with NetBeans Platform
- Experience with Java Native Interface
- Experience communicating with lab instruments
- Smartcard or NFC knowledge
- Experience with Docker, virtualization, or cloud environments
- Experience implementing fuzz testing, fault injection, or side-channel attacks
- Working knowledge of cryptographic algorithms such as AES, DES, RSA, and SHA
- Experience with CUDA or GPU computing
- Programming skills in Python
- Programming skills in Go or Rust
SGS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about SGS and has not been reviewed or approved by SGS.
-
Healthcare Strength — Core medical, dental, and vision coverage is part of the U.S. package and is generally viewed as adequate even if not standout. Company information also underscores healthcare coverage as a standard element of the offering.
-
Retirement Support — A 401(k) is commonly included in the U.S., and group disclosures reference post‑employment benefit plans in select regions. These components provide a baseline of retirement security beyond core pay.
-
Strong & Reliable Incentives — Annual incentive/bonus structures are part of the compensation mix and cited positively in some regions and roles. Punctual pay is also highlighted as a plus.
SGS Insights
What We Do
SGS is the world's leading Testing, Inspection, and Certification company, providing quality and safety control services.
