{"id":2181001,"url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review-2","title":"Senior Security Evaluator – Crypto code review","company":{"id":2625436,"name":"SGS Brightsight","domain":"sgs.nl","url":"https://alion.io/company/sgs-nl","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Operations","role_family":"Operations","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Delft, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":111000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":21},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-09-07T08:00:07Z","employer_posted_date":null,"last_verified_at":"2026-09-07T08:00:07Z","board_verified":false,"closed_at":null,"days_open":37,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":37},"description":"Product security is the result of a combination of security provided by hardware and software. In general, security cannot be provided by hardware alone and needs to be complemented by security implemented in software. The smallest details can make the difference between a secure and an insecure product. Careful examination is therefore required to judge the security quality.\n\nMost ICT products for secure applications implement cryptographic operations. During the vulnerability analysis of these products, the code of the crypto library is thoroughly analyzed to identify weaknesses in the implementation of the crypto algorithms with the aim of exploiting attacks using advanced techniques such as fault injection or side channel analysis.\n\nAs a Senior Security Evaluator – Crypto code review, you apply your expertise in secure cryptographic implementations to identify the security mechanisms and define sophisticated attack scenarios using state-of-the-art attack methods. It is your responsibility to convince product developers of your findings to allow them to improve their cryptographic implementations, and to provide sufficient argumentation to certification schemes why a product is still secure.\n\nSGS Brightsight is looking for enthusiastic cryptography experts with some background in hardware security who are up for this challenge and believe they have the capabilities to perform these assessments.\n\nYou will collaborate in different evaluation teams with experts in different fields, including secure coding, secure hardware design, fault injection, side channel analysis, cryptography, and evaluation methodology, with the goal of assessing whether products can be certified.\n\nDuring these assessments you will have direct contact with crypto library developers and provide feedback on their solutions. Customer meetings are internationally oriented, involving discussions in different cultural contexts. You will document the findings and argumentation for both the product developer and the approval bodies. You will also support colleagues who are executing in the labs the attack scenarios you have defined.\n\nProducts are changing rapidly, as are the attacks applied to these products. Thus, crypto library code reviewers require constant improvement and adaptation to keep on top of what is in the field and could threaten products currently being assessed. You will gain significant knowledge on secure product implementation by having access to different vendor solutions. The interaction with many developers around the world is a great experience that will trigger continuous improvement.\n\nTo get up to speed for this position you will participate in the Brightsight training program on methodology and technology. You will also join different technical domain groups, such as crypto and side channel, where technical experts meet globally to discuss the state of the art, daily challenges, and improvements. You will work in a very international environment and have the opportunity to learn from reviewing and assessing many secure implementations.\n\nQualifications\n\n BSc, MSc or PhD degree in a technical field such as Information Security, Computer Science, Electronics, or Mathematics, with experience in cryptographic implementations and testing for embedded systems\n\n Knowledge of cryptographic algorithms including DES, AES, RSA, ECC, and HMAC, and experience with secure implementations\n\n Demonstrable understanding of Post Quantum Cryptography is preferred\n\n Ability to understand state-of-the-art attack methods such as side channel analysis and fault injection to perform security assessments\n\n Ability to communicate knowledge convincingly, both orally and in writing, to internal and external entities\n\n Ability to guide and support experts in side channel and fault injection attacks by clearly explaining weaknesses in implementations\n\n Good knowledge of the English language\n\nWhat SGS Brightsight offers\n\nSGS Brightsight provides a very good training program, from the basics to expert level. We offer a supportive work environment that fosters professional growth and development.\n\n Be part of a multicultural team with highly motivated colleagues from all over the world\n\n Work for the recognized global leader in security evaluations\n\n Work with all major developers on their latest innovations\n\n Enjoy an informal and intellectually challenging work environment","description_format":"text","description_chars":4414,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto"],"lifecycle":[{"event":"open","at":"2026-10-09T14:29:30Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.577,"p_room":0.45,"age_days":36,"expected_fill_days":23,"reasons":["seen:36","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review-2","json_url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review-2.json","meta":{"generated_at":"2026-10-14T16:58:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21581,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2625436},"rest":"https://alion.io/mcp/rest/get_company?id=2625436"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsgs-senior-security-evaluator-crypto-code-review-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsgs-senior-security-evaluator-crypto-code-review-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsgs-senior-security-evaluator-crypto-code-review-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sgs-senior-security-evaluator-crypto-code-review-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsgs-senior-security-evaluator-crypto-code-review-2"}]}