C++ Product Engineer

Quarkslab is a French company specializing in information security R&D, consulting and software development. Our expertise is in combining offensive and defensive security to help organizations adopt a new security posture: Force the attackers, not the defender, to adapt constantly. Through our consulting services as well as our software we provide tailored solutions to organizations, helping them to protect their assets, sensitive data, and users against increasingly sophisticated attacks.

Quarkslab is an avid and active user of, and contributor to, Open Source Software and develops and maintains state-of-the-art security tools such as LIEF , QBDI, Triton, Irma, and several other projects.

We develop two commercial software products: QFlow, a platform to automate and orchestrate security analysis of files at scale, and QShield, advanced code and data protection software to disrupt code lifting, reverse engineering and tampering attacks.

The QShield team develops several protection solutions, for C/C++/Java code (aka. *obfuscators), cryptographic keys, and data at rest, but also to attest the legitimacy of a device or an application.

These tools run on different kind of environments, including Linux, Windows, macOS, Android and iOS, and architectures, such as x86_64 and arm for instance, and some of them rely on third party components such as LLVM, a state-of-the-art open source C/C++ compiler.

The challenge you will face will be to help develop and maintain the protection solutions, as we integrate new protections or features, and the targeted environments and architectures evolve. You will also participate in the implementation of customer specific requirements and customer support.

If you like C++, technical challenges, and are curious about security , you will love this job!

Key Responsibilities

• Your main task will be to help maintain and develop our different tools.
• Ensure the quality of the delivered product in terms of security, performance and code size
• Communicate your developments to the rest of the team.

What is QShield?
At Quarkslab we develop QShield, a software for application protection. Our solutions include a tool to protect Java/Kotlin programs and a C/C++ code-obfuscator based on LLVM, a white-box cryptography library, a RASP framework, a digital vault and remote attestation solutions. All these components help to increase the security of applications and firmware/middleware to protect IP, APIs, secrets and every sensitive information used or provided by software.
Where can you help us?

Why work at Quarkslab?
Work with an amazing team, eager to learn and play with new approaches and technologies, mixing various skills (security, compilation, program analysis, reverse engineering, software engineering). International environment with offices in Paris and Buenos Aires (team croissants vs. team asado), representations in Tokyo and Singapore.

• Attend conferences in your field, learn from many internal events (weekly conference, trainings, research activities).
• Contribute and support Open Source Software: Our own tools and other people's projects.
• Flexible work hours, work from home.
• Premium health insurance.

Recruitment process:

1. Call with our talent acquisition manager.
2. Video call with the Hiring Manager.
3. Do a short programming challenge
4. Interview with C-Level, QShield business unit and HR Manager at Quarkslab’s Office (or remote due to Covid).
5. HR debrief and job offer.

Quarkslab is proud to be an equal opportunity workplace employer. We are committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability or gender identity. If you have a disability or special need that requires accommodation, please let us know and we will be happy to accommodate.

Who you are
The skills or knowledge we think you should have:

• 3 years+ experience in development in C++
• Team player to exchange about your knowledge with others
• Spoken English

But also, that would be nice if you knew:

• CMake, Git and Gitlab
• Some of the targeted environments (in particular Windows or MacOs) or architectures (in particular Arm or IoT)
• Notions of cryptography or cryptography usage
• Notions of reverse engineering
• Python