Senior Embedded Cybersecurity Analyst

Company Description Quest Global is a global engineering services company supporting customers across Aerospace & Defence, Automotive, Energy, Hi-Tech, MedTech & Healthcare, Rail, and Semiconductor industries. With operations in more than 20 countries, the company provides engineering and delivery capabilities through a worldwide network of centers. Quest Global offers opportunities to work on complex, industry-leading projects with international teams and advanced technologies. The organization emphasizes integrity in its recruitment process and does not request payment at any stage of hiring, helping candidates engage with confidence. More information about careers and recruitment practices is available on the Quest Global careers website.

Job Requirements

Embedded Cybersecurity Analyst 8+ years of experience in leading and supporting the secure development.

Key Responsibilities

• Work with Cybersecurity Advisor/Coach to ensure each release compliance with Secure Development Lifecycle (SDL), cybersecurity standards and regulatory compliance

• Mentor engineering teams and provide guidance in architecting, designing and threat model during development cycle

• Support to evaluate, track and resolution of product and runtime cybersecurity issues and related technical debt in 3rd party package

• Manage and utilize static code analysis, dynamic analysis, and Software Composition Analysis (SCA) tools, including Coverity, SQuORE, Valgrind, CppCheck, Black Duck Binary Analysis (BDBA), and Black Duck Hub.

Work Experience

• 8+ years of experience in software development for multitasking embedded systems running on Linux, VxWorks/RTOS, and Windows.

• Strong programming skills in C/C++, including object-oriented design and development

• Good knowledge in IEC 62443-4-2 cybersecurity standard

• Familiarity with open-source software (OSS), Git, GitHub, Debian GNU/Linux, and Ubuntu.

• Familiarity with Software Composition Analysis (SCA), Static Code Analysis and Static Application Security Testing (SAST), Fuzz testing