Cryptography R&d Security Engineer

**Job Title**: Cryptography R&D Security Engineer **Location**: Paris, Rennes or Remote You believe crypto means cryptography? This job might be for you. While cryptography related audits could be different from one to another, the common core remains the same. We start by discussing with the clients to understand their needs and define the action plan. Following a technical kick-off, the next steps are to discover the product and interact with non-crypto engineers, for example, to check how protocols and algorithms have been chosen and how they are implemented, if the random generator is cryptographically sound, and if relevant, propose adaptations or different designs in order to adequately protect the goods handled by the product. At Quarkslab, cryptographic engineers are also a resource to others, and help them to solve issues. Therefore, we are looking for profiles that can understand problems quicky, make others explain their struggles with more details, and explain crypto concepts to colleagues using plain words. Being brought to interact with other experts, you will thus have the possibility to learn new skills from other Quarkslab engineers such as fuzzing, obfuscation or smartphones technologies. Learning and growing is fundamental to Quarkslab, that's why we propose internal trainings covering a wide range of topics. At Quarkslab, we enjoy performing research to smooth our audit activities, get better results as well as writing tools to facilitate our work. Within this role, you will have the opportunity to work on R&D projects in which you will step up and define new methodologies and proof-of-concepts to facilitate cryptography vulnerability research, and to share your knowledge in conferences and internally. Having an academic background is not mandatory but strongly encouraged as we are looking for someone able to dig into academic articles, quickly sort out relevant and broken ideas, and keep the Quarkslab cryptography community alive by sharing ideas through internal presentations and welcoming external guests. Still interested? Both junior and senior profiles qualify for this job offer so don't be frightened to apply **_ Your responsibilities include:_** - Follow-up on the cryptography eco-system evolution based on your past knowledge and expertise, including known standards and guidelines - Propose and carry R&D work/topics - Share knowledge internally and externally, throughout Quarkslab's blogpost, internal presentations, trainings or conferences - Perform private security audit and consulting - Define, build, and carry internal trainings on cryptography - Help QLab's offer definition and presales **_You are autonomous, eager for team-work, enthusiastic about sharing your knowledge, and you have experience in the following areas:_** - Symmetric and asymmetric cryptography - Post-quantum schemes - Knowledge of real-world protocols - Ability to understand most common programming languages (e.g., C, C++, JavaScript, Python) - General mathematical knowledge - Excellent writing skills - Ideally, knowledge of existing cryptographic security guidelines (e.g., "Guide des mécanismes cryptographiques" from ANSSI) - Ideally, white-box cryptography attacks and design - You are fluent in English. **About Quarkslab** Quarkslab is a French company specializing in information security R&D, consulting and software development. Our expertise is in combining offensive and defensive security to help organizations adopt a new security posture: Force the attackers, not the defender, to adapt constantly. Through our consulting services as well as our software we provide tailored solutions to organizations, helping them to protect their assets, sensitive data, and users against increasingly sophisticated attacks. Quarkslab is an avid and active user of, and contributor to, Open Source Software and develops and maintains state-of-the-art security tools such as LIEF, QBDI, Triton,Irma, and several other projects. We develop two commercial software products: Quarks Flow, a platform to automate and orchestrate security analysis of files at scale, and Quarks AppShield, advanced code and data protection software to disrupt code lifting, reverse engineering and tampering attacks. **About the Lab** Within Quarkslab, the Lab, composed of 38 engineers, carries out projects, internal or external, around the following themes: - Reverse engineering: understanding how a program works without having the source code; - Vulnerability research: evaluate the robustness of a target, identify vulnerabilities and develop exploits; - Hardware and software security: working on smart card-based systems, designing software and hardware architectures and testing their security level. These projects are conducted in different technical environments, from general public operating systems to dedicated SOCs and hardware. We focus on the internal mechanisms of these systems with specific tools (see our public tools such as