Senior Security Specialist

Job description

Company Overview

Sigma Connectivity is a global design house. We are a team of 700 talented engineers and our main office is located in Lund, Southern Sweden. Primarily we run in-house projects focusing on connected products within consumer electronics and IoT devices and we have the capability in terms of people, expertise and labs to realize the most demanding products on the market. We have offices in Sweden, US, UK, Poland, Germany and Denmark. As a fast-growing company we are constantly looking for open-minded, talented people who want to take part in our journey. The Sigma Connectivity company culture is about sharing experiences and knowledge and with a Nordic work culture we strive for work-life balance and taking care of people. Within Sigma Connectivity you will never work alone.



Job Overview

We are seeking a senior security specialist to our team in Lund! The role requires product design experience from a security perspective in embedded and cloud software development (preferreably Embedded Android). You should have experience in DevSecOps ways of working.



The work consists of engaging with customers as well as defining, implementing and reviewing the security aspect of our projects. As the senior security specialist you will guide our engineering teams, management teams and sales representatives as well as our customers in security aspects throughout product lifecycle.



Role and Responsibility

With a focus on consumer/IoT devices, entire technology stack up to the edge of the cloud.


Stay up to date on the latest trends and current threat level in Security domain.

Help with choosing right toolset and certifications.

Ability to assess, analyze Product security using various securit standards.

Ability to propose system design and architectural solutions for secure product.

Practically implement security solutions.

Propose and carry out innovative tests to ensure quality of product.

Assess the efficacy of the security solutions developed by reviewing and auditing.



Personal Characteristics


Team player

Excellent communication skills to manage stakeholders.

Proactiveness in collaborating and execution.

Willingness to learn new methods / tools / processes

Strong problem solving and critical thinking skills

Strong passion for creativity and solving cutting edge industry problems





Basic qualifications

To succeed in this role you must have:


Knowledgeable about the upcomming Cyber Security part of CE/RED and ETSI EN 303 645.

Knowledgebale in SELinux/SEAndroid.

Experience in mitigating and planning for OWASP top 10, ISO/IEC TS 17961 (Secure C) and CWE/CVE/CVSS.

Experience in Android security features (including factory reset protection, HW crypto acceleration, keystore.)

Experience in secure and verified boot (including SFS anti-rollback, integrity verification with dm-verity and kernel modules signing)

Advanced skills in one or several of: embedded C, C++, Python and Node JS.

Knowledge within secure provisioning

Certified Ethical Hacker (CEH) and/or CompTIA Security+ or similar University cerfication.

Development tools like Git, Gerrit, Jenkins, Coverity.

A good theoretical knowledge of cryptography.





Preferred additional skills, personal traits, experience


Full disk encryption (FDE) or file-based encryption (FBE)

Fuzzing embedded systems

Able to implement cryptographic mechanisms using dedicated software libraries (e.g. : Mocana, mbedTLS and wolfSSL)

Identify and integrate security solutions into products, for example PKI/HSM architectures

Use secure elements offered by different suppliers of electronic components (e.g. : Infineon, STMicroelectronics or NXP) and integrate them with embedded cryptographic libraries.

Experience with automated (re)validation with CTS and GTS

Qualcomm TEE

Secure Payment with QPay/NFC and Google Pay

Strong documentation and writing skills





Technologies: ASLR, NX, ProPolice, safe_iop, OpenBSD dlmalloc/calloc, and Linux mmap_min_addr



We offer


An international working environment

Opportunity to develop cutting edge technology for market leaders and some of the most demanding customers

Extensive hardware and software knowledge and all the equipment to build and test complete products and solutions

Working on a project basis, promoting competence development

At occasions, working on-site with the customer

Being part of a wonderful and experienced team where you will never work alone.

The Sigma Connectivity company culture.