Junior Cybersecurity Engineer - FIPS 140-3 Testing (m/f/d)

Build your career in applied cryptography by learning how the security components inside real products are tested and evaluated.

At DEKRA Digital & Product Solutions, we help technology companies demonstrate that their products meet demanding security requirements. Joining our Cybersecurity Laboratory means working with experienced specialists on the evaluation of software, firmware and hardware cryptographic modules.

You will support projects involving FIPS 140-3 and ISO/IEC 19790, which define security requirements for cryptographic modules: the components that provide functions such as encryption, digital signatures and cryptographic key management.

Previous FIPS 140-3 experience is not required. We welcome recent graduates and early-career professionals with sound technical foundations, curiosity and a methodical approach to problem-solving.

What will your work involve?

This role combines practical testing, technical analysis and detailed reporting. A significant part of the work involves reading specifications, reviewing evidence and explaining clearly how an implementation meets a requirement. Accuracy, patience and clear writing are central to the job.

Working under the guidance of experienced evaluators, you will:

• Review technical documentation, product architecture and relevant source code to understand how a cryptographic module is designed and operates.

• Help translate security requirements into test activities using the laboratory’s procedures and tools.

• Set up test environments, execute tests and investigate unexpected results. Depending on the project, this may include checking authentication, cryptographic key handling, self-tests and error conditions.

• Support cryptographic algorithm testing and develop or adapt scripts to automate tasks and analyse results.

• Identify gaps or inconsistencies between the implementation, its documentation and the applicable requirements.

• Work with senior colleagues and client engineering teams to clarify findings, obtain supporting evidence and verify corrections.

• Prepare traceable test records and technical reports, and support the preparation of validation submissions and responses to review comments.

As you develop, you may also contribute to specialised activities such as reviewing random number generation and entropy-source evidence alongside colleagues with expertise in those areas.

What do you need to bring?

• A degree in Computer Science, Telecommunications, Cybersecurity, Mathematics, Physics, Electrical/Electronic Engineering or a related discipline.

• A basic understanding of cryptography, including symmetric and asymmetric encryption, hashing and digital signatures.

• Practical programming or scripting experience. Academic projects, internships and personal projects count; Python and/or C/C++ are particularly relevant.

• The ability to approach problems systematically, investigate technical details and explain your reasoning.

• English skills sufficient to read technical standards, write clear reports and participate in technical discussions.

• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

The following would be useful, but are not essential:

• Familiarity with Linux, command-line tools, debugging or software testing.

• Experience with cryptographic libraries, embedded systems, PKI or secure communication protocols such as TLS, SSH or IPsec.

• Exposure to FIPS 140-3, ISO/IEC 19790, cryptographic algorithm testing, random number generation or entropy assessment.

• Academic or personal projects involving applied cryptography or security evaluation.

How will you develop?

You will learn the relevant standards, testing methods and reporting practices through guided project work. You will begin with supervised tasks and progressively take responsibility for defined parts of an evaluation as your knowledge and experience grow.

The role offers opportunities to develop expertise in cryptographic module evaluation, algorithm testing, test automation or entropy assessment, depending on your interests and project needs.

What do we offer?

• A permanent contract with hybrid working options based around our Málaga or Alcobendas offices.

• Flexible working arrangements, with early finishes on Fridays and during the summer.

• Health insurance fully paid by the company.

• Access to meal, childcare, transport and Wellhub benefit options.

• Professional development through internal and external training, certification programmes and opportunities to participate in cybersecurity events.

• English lessons to support your continued development.

• Projects with leading technology companies and collaboration with experienced cybersecurity specialists.

• Employee referral incentives, the KUDOS recognition programme and discounts across major brands.

• Healthy snacks and free coffee in the office.

If you enjoy understanding how technology works, investigating details and turning technical findings into clear conclusions, we would like to hear from you. Tell us about a project, course or practical experience that sparked your interest in cybersecurity or cryptography.

We offer you an excellent opportunity to grow and develop your career in a leading multinational organization. For more info about us or what we do, visit www.dekra.com.