C++ and Applied Security | Zenith System Solutions

Pune

Posted 8 hours ago

Role: C++ and Applied Security

Experience: 7–10 Years

Employment Type: Full Time

Shift: General Shift

Interview Process: 2 Internal Rounds + 2 Client Interviews

Role Overview

We are looking for an experienced C++ and Applied Security professional to develop secure client-side applications and authentication features for Windows. The role focuses on identity management, device pairing, and authenticated NDI connections. The ideal candidate should have hands-on experience implementing cryptographic mechanisms and security protocols in real-world products, rather than only general C++ development.

Job Duties and Responsibilities

Strong modern C++ (C++17 or later), memory management, multithreading.
Windows application or service development with MSVC and CMake.
Hands-on use of OpenSSL at the API level: EC keys (P-256), signatures, HMAC, HKDF, AES-GCM.
JWT, JWS and JWK, including signature verification and key thumbprints.
Secure storage of keys and credentials on the client, such as DPAPI, PKCS#12 or the Windows certificate store.
Safe parsing of untrusted network input, and an understanding of attacks like replay, token substitution and algorithm confusion.

Required Skills

Proof of possession tokens such as DPoP (RFC 9449).
OAuth 2.0 and OpenID Connect on the client side, including PKCE, token refresh and revocation.
Device pairing or password authenticated key exchange (PAKE, SPAKE2).
TPM, HSM or secure element integration.
Experience with NDI or any media SDK.
User mode interfaces to kernel drivers.
Implementing from RFCs and testing against published test vectors.

Mandatory Skills