Software Developer - Security Attack Test Benches

About the role

SGS Brightsight, the world's largest independent security evaluation laboratory, is looking for a Software Developer in Barcelona to design, develop and maintain security attack test benches. These test systems evaluate the resilience of software, embedded systems, networks and connected products against cybersecurity threats, focusing on side-channel analysis, fault injection testing and security protocol validation.

Key responsibilities

• Analyse the existing test bench architecture, gather requirements from security evaluators and researchers, and turn operational needs into functional requirements.
• Develop new features in Java, extending and modifying system components, integrating new lab instruments and new modules, and following coding standards and software engineering best practices.
• Design and implement secure test applications in C running on the evaluated products or other hardware.
• Extend, execute and validate tests on the test bench product, and create and maintain CI/CD scripts and pipelines for automated build, integration, testing and deployment.
• Document system requirements, software architecture and technical specifications, keeping the architecture and design decisions up to date.

Required profile

• Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.
• Proactive attitude and strong motivation to learn about cybersecurity analysis and attack techniques.
• Experience with Windows and Linux development environments.

Required skills

• Strong programming in Java and C (for microcontrollers and RTOS).
• Maven, Swing-based UI components, Git, and byte-level programming.
• Desired: NetBeans Platform, Java Native Interface, smartcard/NFC, Docker, virtualization or cloud, fuzz testing, fault injection and side-channel attacks, common cryptography algorithms (AES, DES, RSA, SHA), CUDA/GPU computing, and Python, Go or Rust.