Mobile and Software Security Assessor

Role Summary

As a mobile and software security assessor, you will be responsible for analyzing and evaluating the robustness of security mechanisms implemented in mobile applications, systems and platforms.

You will collaborate closely with multidisciplinary teams and contribute to the overall improvement of the security and compliance of cutting-edge products embedded in Android and iOS environments: mobile payment solutions, digital wallets, identity and authentication applications, biometric solutions, etc.

Appreciated assets

Experience with mobile security testing frameworks.

Knowledge of mobile payment, digital identity or biometrics technologies.

Knowledge of security assessment standards (EMVCo SBMP, PCI MPoC, etc.).

Experience in developing automation tools or scripts (Python, Bash, Rust).

Responsibilities

Your responsibilities will include

• Software security analysis: study the architecture, security mechanisms and attack surfaces of mobile applications and systems to assess their level of resistance to modern threats.
• Penetration testing and vulnerability scanning: perform static and dynamic analyses, identify exploitable vulnerabilities and demonstrate their potential impact through realistic attack scenarios.
• Advanced reverse engineering: analyze and instrument applications and binaries in order to evaluate the robustness of software protections, authentication mechanisms, anti-tampering and anti-reverse engineering countermeasures.
• Mobile Platform Assessment: Examine the security mechanisms specific to embedded Android, iOS, and Linux environments, as well as their interactions with secure hardware components.
• Collaboration: work with internal (software, hardware, cryptography experts) and external (architects, developers, security managers) multidisciplinary teams to support clients throughout the evaluation process.
• Continuous improvement: contribute to the evolution of evaluation methodologies, internal tools and best practices, while ensuring technological monitoring of new attack and protection techniques.

At Brightsight, you will be able to

• Be part of a multicultural team with multidisciplinary collaborators.
• Working for the recognized global leader in security assessment.
• Work with leading developers of secure products and their latest innovations.
• Benefit from a stimulating work environment that encourages personal and professional development.
• If you're ready to take on exciting challenges and be part of a team of experts, apply today and join Brightsight to shape the future of IT security!

Requirements

• You are passionate about offensive cybersecurity, software analysis and vulnerability scanning.
• Solid knowledge of mobile and embedded operating systems (Android, iOS, embedded Linux).
• Experience in application security analysis, penetration testing or reverse engineering.
• Good command of C, C++, Java, assembly languages.
• Knowledge of ARM and x86 architectures.
• Mastery of static and dynamic analysis tools used to study binaries and applications.
• Understanding of modern security mechanisms: authentication, key management, applied cryptography, partitioning, software hardening.
• Good ability to communicate, popularize and work with a variety of people.
• Scientific rigor, analytical mind and attention to detail.
• Fluency in English (written/oral).

About the Company

Do you want to contribute to securing mobile applications used by millions of users and participate in the evaluation of security mechanisms that protect the most sensitive digital services? Join us as a Mobile and Software Security Assessor!

With over 35 years of experience and accredited laboratories around the world, Brightsight is developers' trusted partner for evaluating and ensuring their products comply with the latest security regulations. Join a multicultural and dynamic team, where expertise and innovation are at the heart of our mission.