Role:Cryptography EngineersDuration: Permanent roleMode: Hybrid
Key ResponsibilitiesDesign and implement cryptographic modules for embedded and automotive platformsDevelop and integrate cryptographic algorithms:oSymmetric cryptographic algorithms such as AES (ECB/CBC/GCM/CCM modes)oAsymmetric cryptographic algorithms such as RSA, ECC (ECDSA, ECDH)oHashing and message authentication algorithms (SHA-2/3, HMAC, CMAC)Implement secure boot, chain-of-trust, and secure firmware update mechanismsDesign and integrate key exchange protocols and secure session establishmentDesign and manage key management systems (KMS) and certificate handling (X.509)Integrate cryptographic libraries (OpenSSL, MbedTLS, WolfSSL, etc.)Integrate Hardware Security Modules (HSM) or TPM-based security solutionsSupport secure communication protocols (TLS, DTLS, IPsec, MACsec)Conduct cryptographic reviews, vulnerability analysis, and performance optimizationSupport compliance documentation and security validation activitiesCollaborate with cross-functional teams for system-level security architecture
Must RequirementsMinimum of a degree in Electronics, Computer Science, Cybersecurity, or related fieldMinimum of 5 years of experience in in cryptography or embedded securityStrong C/C++ programming skillsDeep understanding of:oSymmetric encryption (AES, block cipher modes, authenticated encryption)oAsymmetric encryption & digital signatures (RSA, ECC, ECDSA, ECDH)oHashing and message authentication (SHA-2/3, HMAC, CMAC)oKey exchange protocols and secure session establishmentoPKI and certificate managementExperience in automotive embedded platformsExperience with cryptographic libraries and secure communication protocols (TLS/DTLS/IPsec)Knowledge of secure coding practices and side-channel attack mitigation
Preferred:Experience in Secure ECU Development (keywords AutoSAR, Crypto Stack, SecOC, CAN and CAN-FD, Automotive Ethernet, and so on).C/C++ language experience.Experience with debuggers.Automotive ECU security experienceAUTOSAR Crypto Stack knowledgeSecure boot and OTA/FOTA implementation experienceFamiliarity with post-quantum cryptography conceptsAbility to communicate with Chinese OEMs and development teams
JBRP1_UKTJ