Jr. Cybersecurity Product Assurance-Source Code Specialist

EWA-Canada, An Intertek Company, is comprised of a group of people whose collective knowledge of all aspects of cyber security is widely recognized as world-class. With over 30 years' experience, we have a client base in 20+ countries around the globe. Our success is based on the significant expertise of our team and their use of a structured and vendor-neutral approach to IT security evaluation and information assurance services. Located in Ottawa, we offer attractive compensation and benefits packages and an excellent work environment.

Overview:

• We are seekingexperienced, technology savvy people with a strong interest in the security ofsoftware intensive, real-time systems who want to work within our IT securityevaluation labs.

• We are looking to hiresystems engineers and/or computer software and hardware specialists interestedin the identification of security relevant design weaknesses, implementationflaws, and vulnerabilities. As a Trusted Third Party, we evaluate our client'ssystems and solutions to help them better provide assurance to theircustomers.

• The work involves being partof a team that is performing detailed security analysis of state-of-the-artnetworked systems, applications, and technologies including embedded real-timecarrier grade telecommunications systems and traditional enterprise classsystems. EWA-Canada uses the best available security evaluation methodologiesto maintain our standards and competitive edge.

Technical Requirements:

• Experience withdecomposition of an existing software system (source-code base).

• Experience withautomated static analysis of source-code, including the triage of results.

• Experience withmanual review of source-code, including from a security perspective.

• Experience withbuild systems, especially those targetting embedded or real-time systems.

• Experience withsecure software design and the identification of design weaknesses.

• Experience withsecure coding practices in C/C++, including knowledge of common weaknesses.

• Experience with theanalysis and scoring of a vulnerability that may arise from a weakness, or setof weaknesses.

• Ideally theexperience in this area would have come from work with embedded and real-timesystems.

In addition to theexperience above, a successful candidate should also be familiar with some ofthe following:

• tools for inspecting and manipulating imagesand binary file formats

• assembly languages (e.g. ARM, MIPS, x86_64,etc.) and the use of disassemblers

• hardware enabled roots of trust (e.g. TPM,ARM TrustZone, etc.)

• wireless access network technologies (e.g.3GPP and WiFi) and their protocol stacks

• networking protocols (e.g. IP, UDP/TCP/SCTP,TLS, S1AP, etc.)

• use of virtual machine technologies

• use of scripting languages in Windows andLinux (e.g. CMD/shell scripting), including Python

• reading and understanding Java

• network monitoring/sniffing/scanning

• on-device inspection of network socket useand process listing

• identification of potential malware on asystem

Clearance:

• The successfulcandidate will be subject to a security investigation and will need to meeteligibility requirements for Top Secret clearance in Canada

Education:

• Bachelor or master'sdegree in Comp. Science, Engineering or other relevant technical field, orequivalent combination of work experience and education

A career with Intertek means joining a global network of professionals dedicated to bringing quality and safety to life. Our vision is to become the world's most trusted partner for Quality Assurance and we offer our employees the chance to make an impact with attractive growth opportunities in this industry on a global scale.

Compensation:

EWA-Canada, an Intertek company, offers a salary and benefit package competitively placed with the local market. We promote a culture where motivated customer-oriented employees can flourish, experience professional fulfillment and reach their highest potential. Medical, Prescription, Dental, Vision, and Disability Insurance plans; RRSP plan with company match; paid time off (vacation; sick holiday); Employee Assistance Program (EAP); Tuition Reimbursement, and more.

Accommodation:

EWA-Canada, an Intertek company encourages applications from all qualified candidates. Please contact hr.canada@intertek.com if you need accommodation at any stage of the application process or want more information on our accommodation policies.

http://www.intertek.com/cybersecurity/ewa-canada/