{"id":275444,"url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review","title":"Senior Security Evaluator – Crypto code review","company":{"id":3634,"name":"SGS","domain":"sgs.com","url":"https://alion.io/company/sgs","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":639,"ghost_share":0,"stale_share":0.997,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Operations","role_family":"Operations","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Delft, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":44000,"max_usd":88000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":41},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-06-04T14:46:11Z","employer_posted_date":"2026-06-04","last_verified_at":"2026-10-30T14:34:29Z","board_verified":true,"closed_at":null,"days_open":148,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":146},"description":"SGS Brightsight is the world’s largest independent security evaluation lab, with accredited facilities across the globe. Our teams in Delft (The Netherlands), Barcelona and Madrid (Spain), Graz (Austria), Meyreuil (France), Beijing and Shanghai (China), Taipei (Taiwan), Singapore, and the USA are dedicated to helping companies ensure their products comply with the latest security regulations and requirements. With over 35 years of experience in evaluating IT products across various industries, we work at the forefront of security, evaluating products against stringent governmental and private standards.\nAt SGS Brightsight, our knowledge-driven environment is powered by professionals from diverse technical backgrounds. We pride ourselves on fostering an open, ambitious, and international atmosphere that values continuous growth. More information about our work can be found at SGS Brightsight: Security Evaluation Lab.\n Product security is the result of a combination of security provided by hardware and software. In general, security cannot be provided by hardware alone and needs to be complemented by security implemented in software. The smallest details can make the difference between a secure and an insecure product. Careful examination is therefore required to judge the security quality.\nMost of the ICT products for secure applications implement cryptographic operations. During the vulnerability analysis of these products, the code of the crypto library is thoroughly analyzed to identify weaknesses in the implementation of the crypto algorithms with the aim to exploit attacks using advanced techniques such as fault injection or side channel analysis.\nAs a crypto library code reviewer, you apply your expertise in secure cryptographic implementations to identify the security mechanisms and to define sophisticated attack scenarios using state-of-the-art attack methods. It is your responsibility to convince product developers of your findings to allow them to improve their cryptographic implementations, and to provide sufficient argumentation to certification schemes why a product is (still) secure.\nBrightsight is looking for enthusiastic cryptography experts with some background in hardware security who are up for this challenge and believe they have the capabilities to perform these assessments.\nYou will collaborate in different evaluation teams with experts in different fields: secure coding, secure hardware design, fault injection, side channel, cryptography, evaluation methodology experts, etc., with the goal to assess if the products can be certified.\nDuring these assessments you will have direct contact with crypto library developers and provide feedback to their solution. Customer meetings are internationally oriented, which involves discussions in different cultural contexts. You will document the findings and argumentation for both the product developer and the approval bodies. You will also support colleagues who are executing in the labs the attack scenarios you have defined.\nProducts are changing rapidly as are the attacks applied to these products. Thus, crypto library code reviewers require constant improvement and adaptation to keep on top of what is out in the field and could threaten products you are currently assessing. You will gain significant knowledge on secure product implementation by having access to different vendor solutions. The interaction with many developers around the world is a great experience that will trigger continuous improvement.\nTo get up to speed for this position you will participate in the Brightsight training program on Methodology and Technology. You will also join different technical domain groups (e.g. crypto, side channel, etc.) where technical experts meet globally to discuss the state-of-the-art, daily challenges and improvements. You will work in a very international environment and have the opportunity to learn from reviewing and assessing many secure implementations.\n We are looking for people with a BSc, MSc or PhD. degree in a technical field (Information Security, Computer Science, Electronics, Mathematics) that have experience with cryptographic implementations and testing for embedded systems.\n\nYou must have knowledge in different cryptographic algorithms including DES, AES, RSA, ECC, HMAC and experience with secure implementations.\n\nDemonstrable understanding of Post Quantum Cryptography is preferred.\n\nYou must have the ability to understand state-of-the-art attack methods (side channel analysis, fault injections, etc.) to perform the security assessment.\n\nThis job also requires that you communicate knowledge convincingly, both orally and in writing, to internal and external entities.\n\nYou must be able to guide and support experts in side channel and fault injection attacks by clearly explaining weaknesses in the implementations.\n\nYou must have a good knowledge of the English language.\n\n SGS Brightsight provides a very good training program, from the basics to expert level We offer a supportive work environment that fosters professional growth and development We offer a competitive salary package based on the candidate.\nAt SGS Brightsight you will:\nBe part of a multicultural team with highly motivated colleagues from all over the world\nWork for the recognized global leader in security evaluations\nWork with all major developers on their latest innovations\nEnjoy an informal and intellectually challenging work environment.","description_format":"text","description_chars":5478,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Biotechnology","Professional Services","Testing, Inspection & Certification"],"lifecycle":[{"event":"open","at":"2026-09-05T13:13:43Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.324,"p_room":0.28,"age_days":147,"expected_fill_days":33,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review","json_url":"https://alion.io/job/sgs-senior-security-evaluator-crypto-code-review.json","meta":{"generated_at":"2026-10-30T18:57:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8226,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3634},"rest":"https://alion.io/mcp/rest/get_company?id=3634"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsgs-senior-security-evaluator-crypto-code-review"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsgs-senior-security-evaluator-crypto-code-review"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsgs-senior-security-evaluator-crypto-code-review"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sgs-senior-security-evaluator-crypto-code-review\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsgs-senior-security-evaluator-crypto-code-review"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":275444}},{"tool":"search_jobs","arguments":{"company":"sgs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":275444},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}