Junior Cybersecurity Engineer – Cryptography and Hardware Security Testing (m/f/d)

Build your career in applied cryptography and product security at DEKRA Digital Trust Services, where you will learn how security-critical components are tested and evaluated in real products. As a junior member of the Crypto Team in Cybersecurity, you will contribute to the evaluation of cryptographic algorithms, protocols and security-critical implementations across a wide range of projects, including cryptographic module testing, implementation security, random number generation, entropy evaluation, hardware security, side-channel analysis, fault injection and post-quantum cryptography. You will work with experienced specialists on evaluating cryptographic modules, embedded systems and secure hardware, covering software, firmware and hardware implementations. You will progressively gain exposure to different technical areas and testing methodologies, and depending on project needs and development opportunities, you may contribute across multiple domains.

What you'll do

• Analyze the implementations of cryptographic algorithms and protocols from a security perspective
• Review technical documentation, product architecture and relevant source code to understand how a cryptographic module is designed and operates
• Translate security requirements into test activities using the laboratory's procedures and tools
• Set up test environments, execute tests and investigate unexpected results, including checking authentication, cryptographic key handling, self-tests and error conditions
• Support cryptographic algorithm testing and develop or adapt scripts to automate tasks and analyze results
• Contribute to the review of random number generators and entropy sources, including design evidence, data sets and statistical results
• Contribute to implementation-security testing, including side-channel analysis and fault injection testing, according to your background and development path
• Identify gaps or inconsistencies between the implementation, its documentation and the applicable requirements
• Work with senior colleagues and client engineering teams to clarify findings, obtain supporting evidence and verify corrections
• Prepare clear, traceable test records and technical reports, and support the preparation of validation submissions and responses to review comments

What you bring

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or a related discipline
• A basic understanding of cryptography, including symmetric and asymmetric encryption, hashing and digital signatures
• Practical programming or scripting experience, such as academic projects, internships or personal projects; Python and/or C/C++ are particularly relevant
• The ability to approach problems systematically, investigate technical details and explain your reasoning
• English skills sufficient to read technical standards, write clear reports and participate in technical discussions
• Attention to detail, a collaborative attitude and a willingness to learn from feedback

Nice to have

• Familiarity with Linux, command-line tools, debugging or software testing
• Experience with cryptographic libraries, embedded systems, PKI or secure communication protocols such as TLS, SSH or IPsec
• Exposure to FIPS 140-3, ISO/IEC 19790, cryptographic algorithm testing, random number generation or entropy assessment
• Knowledge of statistics, electronics, signal processing, side-channel analysis or fault injection
• Academic or personal projects involving applied cryptography, embedded security or security evaluation

What we offer

• A permanent contract with hybrid working options based around the Málaga (Parque Tecnológico) office
• Flexible working arrangements, with early finishes on Fridays and during the summer
• Health insurance fully paid by the company
• Access to meal, childcare, transport and Wellhub benefit options
• Professional development through internal and external training, certification programs and opportunities to participate in cybersecurity events
• English lessons to support your continued development
• Projects with leading technology companies and collaboration with experienced cybersecurity specialists
• Employee referral incentives, the KUDOS recognition program and discounts across major brands
• Healthy snacks and free coffee in the office

About DEKRA Digital Trust Services

DEKRA Digital Trust Services helps technology companies demonstrate that their products meet demanding security requirements. In the Cybersecurity Laboratory, experienced specialists evaluate cryptographic modules, embedded systems and secure hardware, working with standards such as FIPS 140-3 and ISO/IEC 19790 that define security requirements for cryptographic modules responsible for encryption, digital signatures and cryptographic key management.