Dualer Master: Software Security Engineer (m/f/d)

Definition and further development of the security architecture of the Tester software platform focusing on Linux-based workstations. Translation of the requirements of the Cyber Resilience Act (CRA) into specific product requirements and development guidelines.

Implementation of Threat Modeling and Security Risk Assessments for Software Architectures, Interfaces and External Integrations.

Identification and analysis of vulnerabilities within the software stack (C++, Java, Linux).

Introduction and further development of safe development processes, including secure coding policies, security-oriented code reviews, use of static code analysis and dependency scanning tools.

Monitoring security messages and vulnerability databases (e.g. CVEs) for third-party libraries, Linux components and external dependencies.

Analysis of reported vulnerabilities and security incidents, coordination of causes analyses and countermeasures with the development teams.

Definition and maintenance of processes for vulnerability management and Responsible Disclosure.

Development of concepts for secure software updates and the protection of software integrity.

Advising the development departments on all questions of product safety.

Assessment of safety-relevant risks in the execution of customer-specific test programs and definition of suitable protective measures such as sandboxing or execution insulation.

Above-average Bachelor degree in Computer Science, Cyber Security, Software Engineering or a comparable discipline Knowledge of safe software design and software architectures

Experience with Secure Development Practices for Complex Software Systems

Good knowledge of common software security and protection measures (e.g. OWASP Top 10)

Experience in development with C++ and/or Java

Knowledge of Linux operating systems and their security concepts

First experience in Threat Modeling and Safety Risk Analysis

Knowledge of modern security testing methods such as static code analysis and vulnerability scanning

Understanding relevant safety standards and regulatory requirements (e.g. CRA, NIST, ISO/IEC)

Embossed analytical skills as well as a structured and team-oriented way of working

Very good communication skills in English and German (mind. C1)

In the job: Monthly salary and acquisition of tuition fees by your partner company Other attractive benefits such as sports, job bike, occupational retirement, etc.

Flexible time and work models to ideally arrange job and study

Varied development and career opportunities

Planned takeover after successful studies and perspective of long-term cooperation

In the Master: 4 semesters including Master thesis Accredited & accredited Master's degree from Reutlingen University

Lectures in the block model for optimal compatibility of Job & Study: 80% Job – 20% Master

Modules on topics such as software engineering, cloud computing, software architecture or database systems

Optimal combination of theoretical teaching content and practical application in the company

Premium Teaching by experienced professors and lecturers of HS Reutlingen as well as experts:

Small Course Groups & Case Studies for Individual and Practical Learning

Large network of Alumni and Kommiliton: indoors and events such as ski trips & barbecue facilities

Support and advice by the Knowledge Foundation team during the entire application and selection process as well as the study