IDEMIA Public Security

QA Engineer

• Conduct comprehensive penetration testing of Mobile ID applications (Android and iOS)
• Perform security assessments of Digital Identity Wallet and Civil Identity backend systems and APIs
• Test cloud infrastructure security controls across AWS environments
• Evaluate biometric authentication systems and liveness detection mechanisms
• Assess PKI implementation, SOC 2, X.509 certificate management, and cryptographic controls
• Conduct network penetration testing of government integration points and DMV connections
• Perform social engineering assessments targeting identity verification processes
• Test mobile SDK security implementations and third-party integrations
• Evaluate web application security for citizen enrollment portals
• Assess compliance with government security frameworks (NIST, FedRAMP, FISMA)
• Develop detailed vulnerability reports with risk ratings and remediation guidance
• Collaborate with development teams to validate security fixes and implement secure coding practices
• Participate in threat modeling sessions for new product features
• Maintain testing tools and develop custom exploits for identity-specific vulnerabilities

Penetration Testing Engineer – IV