Product Security Engineer

The AdaCore Security team is looking for a Product Security Engineer to help AdaCore scale our various missions.

Everything we do at AdaCore is centered around helping developers build the safest, most secure open-source software. 

For over 25 years, we’ve worked with global leaders across avionics, aerospace and defense industries, building tools and providing services that ease the complex and difficult process of developing high-integrity software. As the need for truly secure and reliable applications expands into industries such as automotive, medical, energy, and IOT, we’re advancing our time-tested technologies to bring expertise and services to help a whole new generation of developers.

Our 150 experts worldwide in the US (New York), France (Paris, Toulouse, Grenoble and Vannes), the UK, Estonia and Germany all play a role in developing bleeding edge technologies to meet the highest grade of software development.

Joining AdaCore is about joining a culture of innovation, openness, collaboration and dependability, which defines how we work together, with our customers and partners.

Working in an international team, you will be responsible for continuously improving the company’s information systems.

Job Description

As part of AdaCore’s QA and Cybersecurity teams, you will be in charge of implementing and maintaining infrastructure necessary to provide our customers with accurate and up-to-date information related to the security of our products. In addition, you will be working with the Product Engineering team to identify, track, publish and resolve security issues. Furthermore, you will help define, implement and maintain vulnerability management as well as secure development procedures and train engineers to improve security awareness and compliance with our procedures.

Responsibilities

• Implement and advance SBOM and vulnerability analysis infrastructure
• Validate SBOM and vulnerability reports on AdaCore products
• Identify possible security issues from incoming security submissions and support requests
• Analyze possible security issues to determine if they are actual vulnerabilities
• Draft security advisories and get them published
• Manage CVE entries in the MITRE database for AdaCore products
• Define and maintain procedures in the area of product security and CVE management
• Define and maintain secure development procedures for AdaCore products
• Train the Engineering team to improve security awareness and effective enforcement of our procedures

Qualification and skills

• Software engineering background (mandatory)
• Advanced knowledge of Python (mandatory)
• Advanced knowledge of either C, C++, Ada or Rust (mandatory)
• Experience in Cybersecurity and vulnerability management (mandatory)
• Good writing  skills in English (mandatory)
• Good communication skills and ability to teamwork (mandatory)
• Experience with software supply chain security (desirable)
• Experience with pen testing or security analysis (desirable)

Location

France (Toulouse, Paris), Germany (Dresden)

Beyond the job

We are looking for engineers who want their work to have a direct impact on improving the reliability, safety and security of the software that modern society has grown increasingly dependent on in an international environment. Our sales and marketing team is staffed with multi-talented, tenacious and creative individuals; and our HR team is committed to ensuring your tenure with AdaCore is a positive one. Our cultural diversity is one of our strengths, enabling us to operate successfully on an international scale and we celebrate it during our social events (summer meetings, activity week-ends, Christmas dinner etc). 

We encourage our employees to explore their curiosity by providing them ongoing and lifelong training from their first day in AdaCore with a strong onboarding plan. As we know that juggling work and life is challenging, we offer flexibility to accommodate personal needs and work commitments.  

AdaCore offers competitive compensation, benefits and thoughtful perks. We go beyond industry standards to help keep our employees comfortable and satisfied both on and off the job, no matter where they are based.