Product Security Consultant

🕒 vor 2 Monaten

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

CENSUS

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

💼 Beratung

🏥 Gesundheitswesen

🔒 Cybersecurity

Consulting • Healthcare • Cybersecurity

CENSUS ist ein Cybersecurity-Unternehmen, das umfassende Sicherheitstests und Beratungsdienste anbietet. Sie bieten eine Reihe von Dienstleistungen, einschließlich Tiger-Team- und Penetrationstests, umfassender Tests von mobilen Apps und Praktiken für den sicheren Softwareentwicklungs-Lebenszyklus (SDLC). CENSUS engagiert sich in der Cybersecurity-Technik, um digitale Vermögenswerte und Infrastrukturen zu schützen. Sie konzentrieren sich auch auf Produkt- und Organisationssicherheit, Schwachstellenforschung und bieten Beratungsdienste für verschiedene digitale Sicherheitsherausforderungen an. CENSUS ist aktiv in der Cybersecurity-Community engagiert und nimmt an bemerkenswerten Veranstaltungen wie dem Cybersecurity Financial Services Summit und dem Autotech Europe Forum teil.

Beschreibung

• Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories). • Assess the completeness, accuracy, and risk coverage of various threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP, TARA, TAL, etc.). • Verify security requirement traceability across assets, trust boundaries, and system functions. • Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management). • Perform targeted security testing (white-box and black-box) on system APIs, client/mobile apps, backend services, and cloud infrastructure. • Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols. • Evaluate the use of post-quantum cryptography and hybrid models in secure key management. • Analyze secure deployment configurations across containerized platforms (Docker, Kubernetes), CI/CD pipelines, and cloud services. • Deliver comprehensive, standards-aligned technical reports based on evaluation findings. • Communicate product security risks clearly to both technical and non-technical audiences.

🎯 Anforderungen

• MSc or BSc in Computer Science, Electrical/Software Engineering, Cybersecurity, or a related technical discipline. • 3+ years of experience in product security, software evaluation, or penetration testing. • Proven ability to evaluate threat models, security requirements, and mitigation effectiveness. • Strong technical writing and documentation skills in English. • Excellent analytical skills and attention to detail. • In-depth understanding of security architecture and common system design patterns (e.g., API gateways, microservices, message queues, service meshes). • Hands-on experience performing design-level security reviews and verifying implementation alignment with defined threat models. • Familiarity with structured security frameworks such as Common Criteria, FIPS 140, ISO 15408, OWASP ASVS, and MASVS. • Practical experience with security testing in diverse product environments (mobile, embedded, web/cloud, API). • Knowledge of authentication, authorization, identity, and secrets management technologies (e.g., OAuth2, MFA, PKI, SSO, Cloud IAM, HashiCorp Vault). • Proficiency in applied cryptography (e.g., mTLS, E2EE, AEAD, key derivation, key wrapping, remote attestation). • Ability to identify security vulnerabilities across platforms (e.g., OWASP Top 10, misconfigurations, transport security gaps).

🏖️ Vorteile

• Professional development opportunities • Flexible work arrangements