Embedded Security Expert

Thousands of us around the world wake up every day with a common purpose: to make the world a safer, more secure, and sustainable place. Science is in our DNA; we are endlessly curious and passionate about seeking and speaking the truth. We take delight in knowing that our work makes a meaningful contribution to society, and we are proud that our culture is centered on integrity, collaboration, inclusion, and excellence. UL stands at the forefront of technological advancement, and we are continually challenged to find new ways to foster innovation and positive change. Satisfying? Yes. Exciting? Absolutely!

As our global footprint continues to expand, we are looking for an Embedded Security Expert to join our team in Leiden.

The day-to-day work will include analysis of the security systems and reviewing highly secure code with the goal to identify weaknesses and potential vulnerabilities in the product under evaluation. It will be challenging and rewarding to collaborate with and direct multidisciplinary teams of experts to find your way around the myriad of countermeasures and create insightful Proof of Concepts. All collected intelligence is analyzed and reported to the client and independent, industry experts leading to challenging and meaningful discussions. This feedback loop with the colleagues and industry players creates an excellent playground for professional growth.

• Undertake chargeable security evaluation tasks with respect to deadlines, customer and evaluation requirements. The chargeable tasks may include:
  
  • Code review and vulnerability analysis of different parts of systems such as Operating System, JavaCard Virtual Machine and API, applications, communication protocols with regards to fault injection and protocol level attacks.
  • Design and implementation of innovative software attacks on products under evaluation (logical attacks on JavaCard, Fuzzing, etc.).
  • Generation of expert reports in compliance with industry best standards.
• Follow-up the latest industry-relevant attack techniques and to contribute to and maintain the internal lab expertise in the field of embedded security and state-of-the-art attack techniques.
• Provide high-level technical support to the company and to the operations department. This may include project scoping, test planning and logistics, test procedures, training, and quality issue resolving.
• Represent and promote UL Security Evaluation services in conferences, exhibitions or any key industry events.

• Minimum of 5-7 years’ experience in this field
• Bachelor/Master Degree in Computer Science, Electrical Engineering, Electronics and Communication or similar preferred
• High analytical skills including the current algorithms, schemes and protocols commonly used (software security and cryptography)
• Code review experience in embedded C is a must
• Assembly language is a bonus
• Understanding of vulnerability exploitation methods, reverse engineering, side-channel attacks, fault injection, penetration testing
• Understanding of Logical Attacks concepts is a bonus
• Experience with mobile security and/or smartcard domain would be preferred
• Familiar with any of the following: JavaCard, GlobalPlatform, ETSI, GSMA and EMV standards and specifications
• Test automation with scripting languages such as Python

• Mission: For UL, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply engrained in everything we do.  You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
• People: Ask any UL employee what they love most about working here, and you’ll almost always hear, “the people”. Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results. 
• Interesting work: Your work at UL will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles,  you will get international experience working with colleagues around the world.
• Grow & achieve: Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.