Junior Cybersecurity Engineer – Cryptography and Hardware Security Testing (m/f/d)

Build your career in applied cryptography and product security at DEKRA Digital Trust Services, where you evaluate cryptographic modules, embedded systems and secure hardware alongside experienced specialists in our Cybersecurity Laboratory. As a junior member of the Crypto Team, you will contribute to real-world security testing across cryptographic algorithms, protocols, implementations and hardware components, gradually building expertise in areas such as FIPS 140-3 evaluation, side-channel analysis, fault injection testing and post-quantum cryptography.

What you'll do

• Analyze the implementations of cryptographic algorithms and protocols from a security perspective.
• Review technical documentation, product architecture and source code to understand how cryptographic modules are designed and operate.
• Translate security requirements into test activities using laboratory procedures and tools.
• Set up test environments, execute tests and investigate unexpected results, including checks on authentication, cryptographic key handling, self-tests and error conditions.
• Support cryptographic algorithm testing and develop or adapt scripts to automate tasks and analyze results.
• Contribute to the review of random number generators and entropy sources, including design evidence, data sets and statistical results.
• Contribute to implementation-security testing, including side-channel analysis and fault injection testing, according to your background and development path.
• Identify gaps or inconsistencies between the implementation, its documentation and applicable requirements.
• Work with senior colleagues and client engineering teams to clarify findings, obtain supporting evidence and verify corrections.
• Prepare clear, traceable test records and technical reports, and support the preparation of validation submissions and responses to review comments.

What you bring

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical or Electronic Engineering, or a related discipline.
• A basic understanding of cryptography, including symmetric and asymmetric encryption, hashing and digital signatures.
• Practical programming or scripting experience, with Python and/or C/C++ particularly relevant. Academic projects, internships and personal projects count.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• English skills sufficient to read technical standards, write clear reports and participate in technical discussions.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Nice to have

• Familiarity with Linux, command-line tools, debugging or software testing.
• Experience with cryptographic libraries, embedded systems, PKI or secure communication protocols such as TLS, SSH or IPsec.
• Exposure to FIPS 140-3, ISO/IEC 19790, cryptographic algorithm testing, random number generation or entropy assessment.
• Knowledge of statistics, electronics, signal processing, side-channel analysis or fault injection.
• Academic or personal projects involving applied cryptography, embedded security or security evaluation.

What we offer

• A permanent contract with hybrid working options based around our Málaga (Parque Tecnológico) office.
• Flexible working arrangements, including early finishes on Fridays and during the summer.
• Health insurance fully paid by the company.
• Access to meal, childcare, transport and Wellhub benefit options.
• Professional development through internal and external training, certification programs and opportunities to participate in cybersecurity events.
• English lessons to support your continued development.
• Projects with leading technology companies and collaboration with experienced cybersecurity specialists.
• Employee referral incentives, the KUDOS recognition program and discounts across major brands.
• Healthy snacks and free coffee in the office.

About DEKRA Digital Trust Services

DEKRA Digital Trust Services helps technology companies demonstrate that their products meet demanding security requirements. We operate a Cybersecurity Laboratory where we evaluate cryptographic modules, embedded systems and secure hardware across software, firmware and hardware implementations, working with standards including FIPS 140-3 and ISO/IEC 19790.