(Junior) security evaluator of smart card operating systems and applications

THE POSITION
The evaluators in the domain of Smart Card Operating Systems and Applications participate in projects for our customers. You will assess the products of different customers for multiple sets of security requirements. You will be responsible for finding the facts and drawing conclusions to make a final assessment together with a lead evaluator. The function requires deep technical insights in smart card technology, including areas such as code review, side-channel analysis and other smart card attacks.


As an evaluator you will work in small project teams. This position has a variety of tasks: analytical work, experimental work, reporting, consultancy and participating in international working groups.


Our evaluators are trained in performing evaluations with an “on the job” approach.


OUR WORK
SGS Brightsight evaluates the security of products: in many cases a combination of hardware and software. We assess the level of security based on international recognized standards. We work with financial companies such as MasterCard and VISA, certification bodies of governments and – of course – the developers/suppliers/manufacturers of security products. We also support our customers in understanding the security standards and the evaluation process.


SGS BRIGHTSIGHT
SGS Brightsight is an evaluation lab fully dedicated to ICT security. With around 100 employees we are based in the Netherlands. We perform all types of security evaluations for our customers. Our colleagues have various technical backgrounds. The atmosphere is open, ambitious, multicultural and international. More than 85% of our customers are based outside the Netherlands and more than 50% of them are outside Europe, mostly in Asia. Our colleagues often have opportunities to travel. SGS Brightsight is growing continuously and fast.


OUR JOB REQUIREMENTS
We are looking for people with a bachelor’s or master’s degree in a technical field (electronics, physics, IT, mathematics). Experience in code review and side-channel analysis is an advantage. We are open to other specialisations that might fit. In particular we welcome knowledge of JavaCard/Global Platform. In addition, you need to have a hacker mentality and good all-round English language skills.