Senior Security Researcher - Hardware

About the Job
KATIM is a leader in the development of innovative secure communication products and solutions for governments and businesses. As part of the Space & Cyber Technologies cluster at EDGE, one of the world’s leading advanced technology groups, KATIM delivers trust in a world where cyber risks are a constant threat. The company fulfills the increasing demand for advanced cyber capabilities by providing robust, secure, end-to-end solutions centered on four core business units: Networks, Ultra Secure Mobile Devices, Applications, and Satellite Communications. Our talented team of cross-functional experts continually tackles new challenges, working with the energy of a start-up while maintaining the discipline of a large business to create scalable solutions and products for our customers.

The Senior Hardware Security Researcher will be responsible for conducting advanced security research to provide comprehensive security testing and vulnerability assessments of various hardware products, services, and systems. The role requires a deep understanding of hardware security, including hardware penetration testing, exploitation, secure design practices, and advanced threat modeling.

Key Responsibilities

• Lead and Conduct Hardware Security Research: Perform in-depth security research on hardware devices, identify vulnerabilities, and develop proof-of-concept exploits. Analyze complex hardware systems to understand their workings, pinpoint weaknesses, and propose mitigation strategies. Conduct research on new techniques and identify zero-day vulnerabilities.
• Hardware Security Testing and Assessment: Conduct comprehensive security assessments, including side-channel analysis, fault injection testing, and reverse engineering. Develop and enhance security assessment methodologies and tools. Perform hardware design reviews to identify security flaws and recommend remediation strategies.
• Project Management: Coordinate and lead medium to large hardware security testing projects, ensuring timely and quality delivery of security assessments. Oversee the development of security research plans and schedule security testing activities.
• Collaboration and Communication: Work closely with cross-functional teams to gather requirements, provide security guidance, and ensure secure hardware development practices. Produce detailed security reports and advisories, and present findings to both technical and non-technical audiences.
• Mentorship and Development: Mentor junior researchers and colleagues in your area of expertise, fostering a culture of continuous learning and improvement within the team.
• Client Relationship Management: Nurture relationships with clients to understand their needs and deliver high-quality security research and evaluation work.
• Innovation and Continuous Improvement: Stay updated with the latest security trends, technologies, and methodologies. Contribute to the development of innovative security solutions and best practices.

Job Specifications

• Education: BS/MS/PhD in Electrical Engineering, Computer Engineering, Information Security, or a related field, or the equivalent in experience and exceptional ability.
• Minimum Work Experience: 5+ years of combined experience in hardware security research and security assessments.
• Skills/Certifications:
  • Technical Expertise: Deep understanding of hardware security vulnerabilities and attack vectors. Proficient in hardware penetration testing and exploitation, with knowledge of hardware description languages (e.g., VHDL, Verilog) and cryptographic algorithms.
  • Tools and Techniques: Experience with various hardware security testing tools (e.g., ChipWhisperer, Riscure Inspector). Advanced skills in reverse engineering tools and network security tools.
  • Automation: Proven ability in scripting and automation using languages such as Python, Bash, or PowerShell.
• Interpersonal and Management Skills: Strong organizational skills with the ability to manage multiple projects and effectively communicate technical information to non-technical audiences.