Cyber Security Test Engineer

Overview

Expleo is a global engineering, technology, and consulting service provider that partners with leading organizations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products in automotive and aerospace, optimizing manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalization, automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. With a worldwide presence in 30 countries, our global footprint includes excellence centers around the world, including Romania since 1994.

Responsibilities

• Identify methods to manipulate Remote SIM Provisioning including but not limited to SIM Jacking attack.
• Set up a test environment to conduct analysis of the communication between the UE and eNodeB
• Perform security assessments on wireless devices to identify potential vulnerabilities.
• Identify various methods to circumvent security controls such as authentication mechanism on various wireless devices such as Bluetooth/Wi-Fi, NFC etc.
• Capture wireless communications between a smart phone, and Device Under Test (DUT), and identifying ways to impersonate the device.
• Attempt to extract and/or capture secret keys exchanged during the authentication between the two wireless devices.
• Identify where secret keys are stored persistently upon a successful authentication between two devices.
• Identify the type of authentication and security mode BLE peripheral/central and WPA supports
• Perform analysis on the secure link during the BLE pairing process and identify potential misconfigurations or security flaws.
• Identify and exploiting the vulnerabilities in NFC systems such as a mobile phone used to transmit RF signal to lock/unlock doors.
• Capture, decode and/or perform replay/relay attacks against key fobs using SDR and generating test reports, and recommend the appropriate course of action.
• Participate in research activities to investigate vulnerabilities, emerging cyber threats, and new technologies.
• Prepare and present reports and findings to senior management and Customer, outlining security risks and proposed solutions.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices by being part of the Cybersecurity core team
• Lead root cause analysis efforts to investigate process failures, identify the underlying issues, and develop solutions to prevent future occurrences.
• Act as the primary point of contact for any inquiries or concerns related to the process or project.
• Maintain open and transparent communication with all relevant stakeholders (Arhitects, Developers, Customers, CSMC team), providing regular updates on progress, issues, and successes.

Qualifications

• Bachelor’s degree in computer science, information systems or equivalent experience
• Security Testing experience.
• Technical expertise in various wireless protocols such as GSM, Wi-Fi, Bluetooth, NFC, CAN, UDS and UWB
• Ability to perform various types of security tests such as penetration testing, fuzz testing, and evaluating the security requirements for wireless technologies.
• Hands-on experience regarding security testing Cellular network, Wi-Fi, BT/BLE, and NFC
• CVE and GPS Spoofing knowledge
• Experience with scripting and automation tools for collecting and analyzing data
• Advance knowledge of LTE, RTP/AVB, WPA2/3, NFC, BT/BLE security features
• Experience with wireless specifications for LTE, and Bluetooth

What do I need before I apply

• Hybrid, 2 days per week at the office

Benefits

• Benefit Platform
• Holiday Voucher
• Private medical insurance
• Performance bonus
• Easter and Christmas bonus
• Employee referral bonus
• Bookster subscription
• 7card
• Work from home options depending on project.