Security Engineer (m/w/d)

Your Tasks
Product Security Requirements

• Support the product development during the specification and design of security features
• Support the review of the software architecture and design to ensure a "secure by design" product development
• Participate and provide technical input to the vulnerability scanning and analysis and scoring process and generate vulnerability reports
• Support security and penetration testing of our product lines

Product Certification

• Contribute to security certification work: Help managing and improving certification evidences
• Support tracking of certification maintenance and re-certification activities

Tool Development and Maintenance

• Support the specification development and maintenance of automated external (CVE) and internal (Jira) vulnerability issue monitoring tools
• Integration of SBOM generation tools into the CI/CD pipeline
• Support the selection, configuration and integration of code analysis tools

Your Profile

• Strong knowledge on operating systems, embedded systems, hypervisors or other types of safety and security critical software
• Strong knowledge of the 'C' programming language as well as Python, Shell scripting, tool interactions via REST API and various data formals like XML, Json or YAML
• Exposure to security certifications, e.g., in the avionic, industrial automation, railway or automotive is a plus
• Strong verbal and written communication skills, fluent English is a must

We offer

• An open, cooperative and particularly good working atmosphere
• A permanent employment contract in a modern, well-equipped workplace
• Exciting tasks and individual training opportunities
• Tutor and introduction week during the initial training period
• Mobile working
• Company events

Apply now
Share this Job Offer
Let's make the world a bit safer
SYSGO is the leading European manufacturer of embedded software solutions, specializing in the development of Safety- and Security-critical applications since 1991. Following the motto "Safe & Secure by Design," the company develops PikeOS and ELinOS.
The PikeOS RTOS & Hypervisor meets Common Criteria EAL 5+ certification and is certified according to the highest Safety standards such as DO-178C, IEC 61508, EN 50128 / EN 50657, or ISO 26262. ELinOS is our embedded Linux distribution equipped with a user-friendly IDE and comes with a selection of software packages to meet customer needs.
SYSGO collaborates closely with customers such as Airbus, Thales, or Continental throughout the entire product life cycle, providing support for the formal certification of software according to international standards. Headquartered in Klein-Winternheim near Frankfurt, SYSGO has offices in Rostock and Ulm, France, the Czech Republic, and the UK, maintaining a global distribution network.
The company is certified according to ISO 9001:2015 and DIN EN ISO/IEC 27001:2017 and is a part of the European Thales Group.