Security Test Engineer

Location:

Bucharest - Bucharest, Romania

Job Family:

Engineering

Worker Type Reference:

Regular - Permanent

Pay Rate Type:

Salary

Career Level:

T4

Job ID:

R

About the Role

New opportunity within our large Engineering organization for a Security Test Principal Engineer as part of a new opening position in Connectivity Test Center. This role will be part of a new team based in Bucharest which will work closely with the wider team. Our goal is to build out our Connectivity Test Coordinating team operating from our strategic site in Bucharest providing experienced and dynamic team members to support multiple roles across our portfolio of global projects. This is an extremely exciting time to get involved, to help develop and shape innovative technology and drive change throughout the organization.

What You Will Do

• Identifying methods to manipulate Remote SIM Provisioning including but not limited to SIM Jacking attack.
• Setting up a test environment to conduct analysis of the communication between the UE and eNodeB
• Performing security assessments on wireless devices to identify potential vulnerabilities.
• Identifying various methods to circumvent security controls such as authentication mechanism on various wireless devices such as Bluetooth/Wi-Fi, NFC etc.
• Capturing wireless communications between a smart phone, and Device Under Test (DUT), and identifying ways to impersonate the device.
• Attempting to extract and/or capture secret keys exchanged during the authentication between the two wireless devices.
• Identifying where secret keys are stored persistently upon a successful authentication between two devices.
• Identifying the type of authentication and security mode BLE peripheral/central and WPA supports
• Performing analysis on the secure link during the BLE pairing process and identify potential misconfigurations or security flaws.
• Identifying and exploiting the vulnerabilities in NFC systems such as a mobile phone used to transmit RF signal to lock/unlock doors.
• Capturing, decoding and/or performing replay/relay attacks against key fobs using SDR and generating test reports, and recommending the appropriate course of action, and supporting the mitigation and re-validation efforts
• Participating in research activities to investigate vulnerabilities, emerging cyber threats, and new technologies.
• Prepare and present reports and findings to senior management and Customer, outlining security risks and proposed solutions.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices by being part of the Cybersecurity core team
• Lead root cause analysis efforts to investigate process failures, identify the underlying issues, and develop solutions to prevent future occurrences.
• Act as the primary point of contact for any inquiries or concerns related to the process or project.
• Maintain open and transparent communication with all relevant stakeholders (Arhitects, Developers, Customers, CSMC team), providing regular updates on progress, issues, and successes.

What You Need

• Bachelor's degree in computer science, information systems or equivalent experience
• 5+ years Security Testing experience.
• Strong technical expertise in various wireless protocols such as GSM, Wi-Fi, Bluetooth, NFC, CAN, UDS and UWB
• Ability to perform various types of security tests such as penetration testing, fuzz testing, and evaluating the security requirements for wireless technologies.
• Hands-on experience regarding security testing Cellular network, Wi-Fi, BT/BLE, and NFC
• CVE and GPS Spoofing knowledge
• Experience with scripting and automation tools for collecting and analyzing data.
• Advance knowledge of LTE, RTP/AVB, WPA2/3, NFC, BT/BLE security features
• Experience with wireless specifications for LTE, and Bluetooth
• High sense of responsibility and ability to work under pressure.
• Strong communication and collaboration skills.
• Business fluent in English
• Efficiently meeting deadlines, schedules, and target dates

What is Nice to Have

• ASPICE knowledge
• 10+ year of experience in testing embedded systems
• CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP certifications
• Familiarity and ability to operate GSM simulators tools such as Keysight, Anritsu, and Wi-Fi, BT/BLE analyzers and testing suites.
• Experience with static and dynamic code analysis
• Working knowledge of Android and Linux
• Automotive industry experience
• Experience in Agile/SCRUM
• HW experience with configuration different setups
• Knowledge in ALM is beneficial.
• Expertise in working with distributed development teams.

What Makes You Eligible

• Willingness to travel (0-20% of time) depending on the project needs.
• Availability to work both remotely and from the office if requested.

What We Offer

• Work in international teams with the world's largest automotive manufacturers.
• Use HARMAN Flex – chose the right working model fitting their job (WFH, Hybrid or Office)
• Access career development opportunities and get both on the job training on high-end automotive projects, as well as extensive technical training.
• Access HARMAN Web shop with large employee discounts for audio products (JBL, HARMAN Kardon, AKG
• Are encouraged to a healthy work/life balance with a progressive holiday plan based on total work experience, 2 sick days, 3 days off compensation for weekend legal holidays and flextime.
• And of course, enjoy meal tickets, a premium medical subscription, fitness discounts and other corporate perks.

You Belong Here

HARMAN is committed to making every employee feel welcomed, valued, and empowered. No matter what role you play, we encourage you to share your ideas, voice your distinct perspective, and bring your whole self with you – all within a support-minded culture that celebrates what makes each of us unique. We also recognize that learning is a lifelong pursuit and want you to flourish. We proudly offer added opportunities for training, development, and continuing education, further empowering you to live the career you want.

About HARMAN: Where Innovation Unleashes Next-Level Technology

Ever since the 1920s, we've been amplifying the sense of sound. Today, that legacy endures, with integrated technology platforms that make the world smarter, safer, and more connected.

Across automotive, lifestyle, and digital transformation solutions, we create innovative technologies that turn ordinary moments into extraordinary experiences. Our renowned automotive and lifestyle solutions can be found everywhere, from the music we play in our cars and homes to venues that feature today's most sought-after performers, while our digital transformation solutions serve humanity by addressing the world's ever-evolving needs and demands. Marketing our award-winning portfolio under 16 iconic brands, such as JBL, Mark Levinson, and Revel, we set ourselves apart by exceeding the highest engineering and design standards for our customers, our partners and each other.

If you're ready to innovate and do work that makes a lasting impact, join our talent community today

Important Notice: Recruitment Scams

Please be aware that HARMAN recruiters will always communicate with you from an '' email address. We will never ask for payments, banking, credit card, personal financial information or access to your LinkedIn/email account during the screening, interview, or recruitment process. If you are asked for such information or receive communication from an email address not ending in '' about a job with HARMAN, please cease communication immediately and report the incident to us through:

HARMAN is proud to be an Equal Opportunity employer. HARMAN strives to hire the best qualified candidates and is committed to building a workforce representative of the diverse marketplaces and communities of our global colleagues and customers. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.HARMAN attracts, hires, and develops employees based on merit, qualifications and job-related )