Security Analyst - Security Evaluations

Overview

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

This position will execute the technical part of the security evaluations. This includes review of the target and exploitation when needed. Most of the work will be on embedded systems, and trusted execution environments. Specialized hardware attacks like FI and SCA are performed by other team members.

• Perform code reviews and structured vulnerability analyses in accordance with security certification requirements (e.g., SESIP, Global Platform).
• Create proof of concept exploits on devices under evaluation.
• Lead the technical aspects of evaluation projects by coordinating with the project manager to ensure compliance, technical rigor, and timely delivery.
• Provide clear status updates to clients and project managers.

• Minimum of 2 years of experience in the security evaluation domain, specifically:
• Proven proficiency in C, C++.
• Experience with secure embedded systems, such as Secure Elements, System-on-Chips (SoCs), Trusted Execution Environments, smart TVs, ECUs, etc.
• Good reverse engineering skills using industry standard tools i.e. IDA Pro, Ghidra.
• Good understanding of low-level computer architecture, operating systems, and security features like secure boot, memory isolation, fuses, PAC, ASLR, etc.
• Excellent interpersonal and communication skills; thrives in team environments with diverse stakeholders (technical teams, evaluators, and customers).
• Willingness to occasionally travel to clients or certification bodies in Europe, North America, or Asia.

• CVEs on embedded systems.
• Understanding of ARM Trust Zone.

Keysight is an Equal Opportunity Employer. Careers Privacy Statement.