Description
Meet Yubico: the creator of the most secure passkeys and leading provider of hardware authentication security keys. Our company’s mission is to make secure login easy and available for everyone.
Yubico was founded in 2007 by Stina and Jakob Ehrensvard, and is public on Nasdaq Stockholm Main Market: YUBICO. Our customers include Fortune 500 companies, hundreds of government agencies and millions of individuals in over 160 countries that rely on Yubico technology to secure access to computers, online services and mobile apps.
The Role: The Product Security team is responsible for ensuring Yubico develops and maintains secure products and services. As part of the Product Security team, your primary responsibility will be to collaborate with the firmware and software teams to design and integrate solutions that support secure design and development practices.
Tasks & Responsibilities:
- Define and evangelize requirements and guidance for secure by design and secure by default principles
- Implement automation to prevent and detect security flaws in all phases of development
- Conduct design reviews and manual security assessments
- Lead training and awareness sessions
- Define and implement metrics to provide visibility into the impact of your work
- Define, lead, and influence processes to secure products and services
- Identify and advocate for new and novel uses of Yubico’s technology
Basic Qualifications:
- 3+ years in a product security role
- 3+ years of software development
- Proficiency in threat modeling
- Proficiency in C
- Knowledge of common vulnerability classes
- Experience in static code analysis
Optional Skills and Experience:
- Knowledge of WebAuthn, OATH HOTP, OATH TOTP, U2F, PIV, or OpenPGP
- Proficiency in .NET or C++
- Experience developing for ARM
- Experience in targeted fuzzing
Additional Information We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law.