Senior Applied Cryptography Engineer
Threema is the world's best\-selling secure messenger for both private users and businesses. Since 2012, we have been working tirelessly to ensure that our users can communicate freely without worrying about their privacy. Our growing user base includes millions of private customers and thousands of businesses and organizations from all over the world.We are growing and looking for a new team member to join as aSenior Applied Cryptography Engineer (80 \- 100%)**Your Role**As an applied cryptography engineer at Threema, you will help us design, build and scrutinize the cryptographic protocols behind our messenger, and contribute to the effective privacy protection of millions of people.**Your Tasks**Protocol design and quantum\-safe migration:* Develop and specify cryptographic communication protocols* Design cryptographic systems, such as key management and multi\-device synchronization* Lead Threema's migration to quantum\-safe cryptography, together with the cryptography researchers at IBM Research* Own threat modeling for new product features and protocol designs, in close collaboration with the product and engineering teamsSecurity analysis:* Analyze protocols, algorithms and implementations for security weaknesses, and assess what new attack vectors mean for our products* Assess the vulnerability reports that reach us through our bug bounty partner and coordinate the fix with the engineering teamsResearch and community:* Follow current developments in applied cryptography and turn relevant findings into concrete product improvements* Maintain contacts with the security research community and, if you enjoy it, represent Threema at conferences**Your Skills**Cryptography and engineering:* Degree in computer science, mathematics or information security, ideally with a focus on cryptography, or equivalent practical experience* Solid understanding of modern cryptographic primitives (AEAD, key exchange, KDFs, digital signatures) and of how they fail when combined incorrectly* Working knowledge of key encapsulation mechanisms and of post\-quantum cryptography, including hybrid constructions such as X25519MLKEM768* Experience designing or reviewing security protocols, ideally in end\-to\-end encryption, key agreement or multi\-device settings* You write code yourself, in at least one of Rust, Kotlin, Swift, TypeScript or something comparable* Experience reviewing implementations for side channels, nonce reuse, misuse\-prone APIs and similar problems* Nice to...
Apply at Threema AGSummary and match are AI-generated; verify details on the original posting.
Listed via EURES. All sources