Qureos Mentor

Japanese cheese cake and co snacks

What you&rsquo;ll work on&middot; Protocol implementation (Java): Extend and harden our current Java simulation for the Bio-Hybrid TESLA flow (key chain derivation, delayed disclosure, MAC verification, time windows, key commitment, and revocation handling).&middot; Biometric binding: Define how iris features/quality metrics bind to TESLA key schedules without leaking PII/templates; design privacy-preserving verification artifacts.&middot; IoT integration: Package the protocol for edge devices (e.g., mini-PC/industrial controller) interfacing with an iris scanner (e.g., CMITech EF-45 or similar) and site networks.&middot; Secure storage &amp; key management: Keystore/TPM/HSM use on server/edge; nonce handling, replay protection, and secure audit logs.&middot; Resilience: Handle clock drift, packet loss, lossy links, offline windows, and device compromise scenarios; DoS-aware verification.&middot; API &amp; data paths: Define secure APIs between React/Django back end, Java services, and MS SQL Server; ensure encrypted transit &amp; at-rest data with clear key rotation plans.&middot; Threat modeling &amp; tests: STRIDE-style analysis, unit/prop tests for cryptographic invariants, and red-team scripts for tamper/fuzz testing.&middot; Documentation: Developer-ready specs, message diagrams, and ops runbooks for deployment at construction sites.Required qualifications&middot; 6+ years in security engineering or applied cryptography for production systems.&middot; Strong Java (security, concurrency, performance) and experience with at least one of:Kotlin, Python, C/C++ for edge utilities.&middot; Hands-on with TESLA-like broadcast authentication or time-based key disclosure schemes; comfort with HKDF, HMAC-SHA-256, AES-GCM/ChaCha20-Poly1305, and rolling key chains.&middot; IoT/edge security: device onboarding, attestation basics, secure boot, firmware signing, and field update strategies.&middot; Network security: TLS 1.2/1.3, mTLS, certificate pinning, API auth (JWT/OAuth service-to-service), replay defense, rate limiting.&middot; Data protection for biometrics: template handling, unlinkability concepts, and privacy- by-design patterns.&middot; Proven delivery of a security-critical component (protocol/library/service) used in production.&middot; Experience with biometric devices (iris or face), image/template pipelines, and liveness/quality scoring.&middot; Formal methods or model-checking (TLA+, ProVerif) for protocol sanity checks.&middot; Windows/Linux edge deployments, Docker, CI/CD, observability (OpenTelemetry).&middot; MS SQL Server hardening, secure logging pipelines, KMS/Key Vault (Azure/AWS).&middot; Bilingual UI contexts (EN/AR) awareness and data residency/regulatory familiarity in the GCC.ApplyEmail raffas@tristarsystem.comraffas66@icloud.comwith:1. CV/LinkedIn + links to relevant repos or redacted code samples.2. A short write-up (&le; 300 words) on how you&rsquo;d design key disclosure and replay protection for a TESLA-style protocol over unreliable links.3. One diagram (PNG/PDF) of a device&rarr;edge&rarr;server message flow showing time windows, keys, and logs.Subject: Senior Security &mdash; Bio-Hybrid TESLAJob Type: Full-time

Senior Security Engineer — Bio-Hybrid TESLA (IoT & Biometrics)

What you&rsquo;ll build (real projects you&rsquo;ll touch)&middot; ERP/HR extensions &amp; dashboards: React front-ends and Django/REST back-ends for modules like Sites Setup, PMV Store, Asset Master, Breakdown Machinery, user &amp; password policy management, and bilingual (EN/AR) UIs integrated with ePROMIS ERP (v16) and QuantumHR.&middot; Industrial fuel management: Live telemetry, control and audit trails for pumps, solenoid valves and PODs; integrate microcontrollers/mini-PCs; design resilient offline/online data sync, logging, and analytics.&middot; Identity &amp; security: Hardened authentication flows (policy, history, hashing), and future integrations with biometric devices (e.g., iris scanners) via secure APIs and encrypted storage.&middot; Data &amp; reporting: MS SQL Server&ndash;backed APIs, stored procedures, and reports for operations, compliance, and finance.What you&rsquo;ll do&middot; Own features end-to-end: scope, design, implement, test, ship, and iterate.&middot; Build clean React front-ends (Material UI / Tailwind) with solid state management and i18n (English/Arabic).&middot; Develop secure Django/DRF services and occasional Java services where needed.&middot; Design and optimize MS SQL Server schemas, queries, and stored procedures; review migrations and performance.&middot; Integrate with third-party/legacy systems (ePROMIS, QuantumHR) and field devices (ESP32/industrial controllers).&middot; Implement strong security: password policy, salted hashing, key rotation, audit logs, role- based access, and API hardening.&middot; Ship production-grade CI/CD (Git), code reviews, and automated tests.&middot; Translate business rules into reliable software and clear documentation for users and devs.Must-have experience&middot; 6+ years building production web apps used by real customers or internal teams.&middot; Front-end: React + modern tooling; component libraries; responsive, accessible UIs; form/state management; i18n.&middot; Back-end: Django/DRF (primary) and working Java experience (Spring or similar) for services/integration.&middot; Database: Microsoft SQL Server (schemas, indexes, views, stored procedures, performance tuning).&middot; APIs &amp; integration: RESTful design, auth flows, secure data exchange, pagination, versioning.&middot; Security: Password hashing (PBKDF2/bcrypt/Argon2), password history/policies, OWASP awareness, input validation.&middot; DevOps basics: Git branching, code review, environment configs, logging/monitoring, and CI fundamentals.&middot; Proven delivery: you can point to shipped systems or modules with measurable impact.&middot; Experience with industrial/IoT integrations (ESP32, Modbus, serial/TCP bridges, telemetry pipelines).&middot; Bilingual UI patterns (EN/AR), RTL design competence.&middot; Azure/AWS deployment, Docker, Nginx/Gunicorn, Windows Server/IIS exposure.&middot; Reporting stacks (Power BI, Metabase) and scheduler/ETL experience.&middot; Experience hardening enterprise apps in construction/engineering or logistics.How to applyEmail your CV/LinkedIn + a short portfolio to raffas@tristarsystem.comraffas66@icloud.comInclude:1. 2&ndash;3 shipped products/modules with your role, stack, and measurable outcomes.2. A link to code samples (GitHub/Bitbucket or a redacted snippet).3. One paragraph on securing passwords end-to-end between React &rarr; Django &rarr; MS SQLServer.4. Subject line: Senior Full-Stack &mdash; DESERT FALCON (so we know you read the post).Job Type: Full-time

Full-Stack Developer (Senior) — Digital Transformation & Industrial IoT

Join Japanese cheese cake and co snacks and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Japanese cheese cake and co snacks

ABOUT_COMPANY

Senior Security Engineer — Bio-Hybrid TESLA (IoT & Biometrics)

Full-Stack Developer (Senior) — Digital Transformation & Industrial IoT