Software Security Engineer - Intern at Ledger

Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 20% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in the UK, US, Switzerland and Singapore, Ledger has a team of more than 600 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 5 millions units already sold in 180 countries.

At Ledger, we embody the values that make us unique: Pragmatism, Audacity, Commitment, Trust and Transparency.

We’re making the world of digital assets accessible and secure for everyone. Join the mission. Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 20% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in UK, US, Switzerland and Singapore, Ledger has a team of more than 700 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 6 millions units already sold in 200 countries.The Donjon is the team in charge of the security of all the products built at Ledger. As a software security engineer, your daily job will be to attack Ledger Vault, our solution dedicated to financial institutions, and Ledger Live, our B2C app, in order to maintain and improve our leadership in the industry.Duration: 6 monthsStart date: January/ February 2024

Your mission:

• Develop tools and exploits for our products, and provide fixes for them.
• Perform security reviews of new products or new features launched by Ledger.
• Promote writing secure code to engineering teams.
• Present your work in academic and hacking conferences all over the world.

Technical Skills:

• Fluency in C and Rust or Python, including secure programming in these languages.
• Knowledge in reverse engineering and binary analysis.
• Good knowledge of exploitation techniques, and of mitigations against such techniques.
• Experience with static analysis tools.
• Development of fuzzers, or tools that automate security analysis is a plus
• Ability to develop and document methods, standards, and guidelines.

What we’re looking for:

• A bachelor/master degree in Computer Science/Electrical Engineering
• Good programming skills C (mandatory), Rust or Python 
• A good level in English

What’s in it for you?

• Flexibility: A hybrid work policy
• Social: Frequent social events, snacks and drinks
• High tech: Access to high performance office equipment and gadgets, including Apple products
• Transport: Ledger reimburses 75% of your preferred means of transportation
• Food: We offer lunch vouchers with Swile
• Vacation: 1 day off for every full month worked