Junior Cybersecurity Engineer - Cryptography and Hardware Security Testing (m/f/d)

As a Junior Cybersecurity Engineer on DEKRA Digital Trust Services' Crypto Team, you will evaluate cryptographic modules, embedded systems and secure hardware in real products. You will work alongside experienced specialists to gain exposure to cryptographic algorithm testing, implementation security, side-channel analysis, fault injection and post-quantum cryptography, while contributing to evaluations against standards such as FIPS 140-3 and ISO/IEC 19790.

What you'll do

• Analyze the implementations of cryptographic algorithms and protocols from a security perspective.
• Review technical documentation, product architecture and source code to understand how cryptographic modules are designed and operate.
• Translate security requirements into test activities using the laboratory's procedures and tools.
• Set up test environments, execute tests and investigate unexpected results, including checking authentication, cryptographic key handling, self-tests and error conditions.
• Support cryptographic algorithm testing and develop or adapt scripts to automate tasks and analyze results.
• Contribute to the review of random number generators and entropy sources, including design evidence, data sets and statistical results.
• Contribute to implementation-security testing, including side-channel analysis and fault injection testing, according to your background and development path.
• Identify gaps or inconsistencies between the implementation, its documentation and applicable requirements.
• Work with senior colleagues and client engineering teams to clarify findings, obtain supporting evidence and verify corrections.
• Prepare clear, traceable test records and technical reports, and support the preparation of validation submissions and responses to review comments.

What you bring

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical or Electronic Engineering, or a related discipline.
• A basic understanding of cryptography, including symmetric and asymmetric encryption, hashing and digital signatures.
• Practical programming or scripting experience, with Python and/or C/C++ being particularly relevant. Academic projects, internships and personal projects count.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• English skills sufficient to read technical standards, write clear reports and participate in technical discussions.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Nice to have

• Familiarity with Linux, command-line tools, debugging or software testing.
• Experience with cryptographic libraries, embedded systems, PKI or secure communication protocols such as TLS, SSH or IPsec.
• Exposure to FIPS 140-3, ISO/IEC 19790, cryptographic algorithm testing, random number generation or entropy assessment.
• Knowledge of statistics, electronics, signal processing, side-channel analysis or fault injection.
• Academic or personal projects involving applied cryptography, embedded security or security evaluation.

What we offer

• A permanent contract with hybrid working options based around the Málaga (Parque Tecnológico) office.
• Flexible working arrangements, including early finishes on Fridays and during summer.
• Health insurance fully paid by the company.
• Access to meal, childcare, transport and Wellhub benefit options.
• Professional development through internal and external training, certification programs and opportunities to participate in cybersecurity events.
• English lessons to support your continued development.
• Projects with leading technology companies and collaboration with experienced cybersecurity specialists.
• Employee referral incentives, the KUDOS recognition program and discounts across major brands.
• Healthy snacks and free coffee in the office.

About DEKRA

DEKRA Digital Trust Services helps technology companies demonstrate that their products meet demanding security requirements. In its Cybersecurity Laboratory, the team evaluates cryptographic modules, embedded systems and secure hardware across software, firmware and hardware implementations.