IT Security & Product Security Specialist
About Invasys
Invasys specialises in providing our government customers, such as police and intelligence services, with investigation tools. We focus on in-house research & development in the area of mobile phone and satellite communication.
During the last 6 years we have grown from 25 to 70 people and aim to grow some more over the next two years. Our offices are in a newly constructed building with possibly the best view in Brno. The work environment is flexible, something which helps create a pleasant atmosphere.
Our philosophy is to give smart people freedom to solve tasks as they see most fitting.
The position in context
Invasys has a project-oriented structure and delivers both standard and customised solutions. Our engineering teams, supported by a creative and innovative team of scientists, work hard to deliver solutions the market has not yet seen. The position is organic to the Science Group but will work independently with product teams with a level of autonomy.
Most of the time you will work in a Czech speaking environment but basic knowledge of English is required. The position offers good opportunities for the right person.
Tasks and responsibilities
As IT security and product security researcher you will work in a team with other researchers – mostly radio specialists, and cyber security and cryptology specialists. The work involves in-depth analysis and improvements of security features of InvaSys products. This also includes security analysis and reviews of new (proposed) product features, new proposed functionalities, and contribution to lifetime product security. The ultimate goal is to ensure products are designed from the start to a high security standard and that product security can be monitored during its lifetime.
The security specialist needs to have the personal integrity to present security analysis, findings, proposals objectively and without bias.
Qualifications & Requirements
You can probably say “yes” to most of the following:
- Technical university education (MSc. or Ph.D.)
- Good knowledge of IT Security and applied cryptography (authentication, crypto primitives)
- Good knowledge of network security and anonymity
- Good knowledge of Linux OS security
- Good knowledge of application security
- Familiar with native analysis tooling and frameworks (fuzzing, static analysis, etc.)
- Familiar with network monitoring tools
-
Familiar with ethical hacking skills