Security Engineer - Mobile App - Ztek Consulting INC

Overview
Embedded within the Product Cybersecurity Group (PCG), the Product Security Testing Team (PSTT) performs advanced security testing engagements for pre-production vehicle ecosystem for the next generation automotive solutions worldwide.

Description:
In this role, you will focus on identifying, assessing, and mitigating security risks across various platforms including APIs, mobile applications (iOS and Android), wireless protocols, and Linux systems.
The candidate will also be responsible for penetration testing, proof-of-concept exploits, reverse engineering software to uncover vulnerabilities, and assess their potential impact.
We are looking for candidates who are passionate about system security and have a broader and deeper understanding of the security landscape across software, wireless networks, and APIs. Due to the nature of this position, candidates must work on-site at Toyota HQ in Plano, TX. A hybrid model may be possible for strong candidates.

This position's responsibility includes:
o Conduct analysis of security requirements specifications against implementation
o Perform security assessments, and penetration testing including but not limited to mobile applications (iOS and Android), wireless security, APIs, and Linux OS
o Communicate complex technical findings, and recommending the appropriate course of action, and supporting the mitigation and re-validation efforts
o Develop skills through continuous learning and apply what you have learned relevant to emerging attack vectors, vulnerabilities, and exploits.

Required
o Bachelor's degree (or higher) in Computer Engineering, Computer Science, Cybersecurity or related is strongly desired
o Hand-on experience with Linux Operating Systems and shell scripting
o Hands-on experience performing security assessment on OS or application-level of iOS/Android applications
o Proficient in programming languages such as C/C++, Java, Swift, Kotlin, and Python
o Knowledge of network security principles and various wireless security protocols
o Knowledge of APIs security, and authentication protocols such as OAuth, SAML, etc.
o Hands-on experience on testing tools such as Burp Suite, Frida, dissemblers, debuggers, dynamic instrumentations, and static code analysis
o Strong knowledge and understanding of X.509, SSL/TLS certificate, and general certificate management process
o Deep understanding of API security best practices
o Strong interest to acquire and develop additional skills such as Embedded systems security fundamentals

ABOUT Ztek:

Website:www.ztekinc.com

Ztek Consulting Inc is a minority- and woman-owned business enterprise that leverages a unique blend of human talent, machine learning algorithms, and artificial intelligence to provide customized talent management solutions for clients. Ztek's diversity-focused hiring models have proven successful, particularly in hiring veterans. The company's veteran-focused hiring and deployment program, Z-V.E.T, matches skilled veterans with clients' needs in various areas.

Disclaimer:

Ztek is an Equal Opportunity Employer and prohibits any kind of unlawful discrimination and harassment. Ztek is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment on the basis of race, color, religion or belief, national origin, citizenship, social or ethnic origin, sex, age, physical or mental disability, veteran status, marital status, domestic partner status, sexual orientation, or any other status protected by the statutes, rules, and regulations in the locations where it operates. If you are an individual with a disability and need a reasonable accommodation to assist with your job search or application for employment, please contact us at hrd@ztekinc.com Please indicate the specifics of the assistance needed. Ztek encourages all interested and qualified candidates to apply for employment opportunities. Ztek does not discriminate against applicants based on citizenship status, immigration status, or national origin, in accordance with 8 U.S.C. 1324b.