Common Criteria Evaluator

SGS; Barcelona; Presencial; EUR 30.000 - 50.000; Jornada completa

Descripción de la vacante

A leading security evaluation company in Barcelona is seeking a highly skilled Common Criteria Evaluator to assess IT product security. You'll conduct evaluations based on standards, analyze documentation, and collaborate with teams to improve product security. The ideal candidate has a technical degree and strong analytical skills. This role offers competitive compensation and a supportive work environment.

Servicios

Competitive salary package

Good training program

Supportive work environment

Formación

• Bachelor's or Master's in computer science, telecommunications, electronics, physics, or mathematics.
• Strong analytical skills and attention to detail.
• Ability to prioritize tasks and meet deadlines.
• Work effectively both independently and in teams.
• Fluency in English.

Responsabilidades

• Evaluate IT products based on Common Criteria.
• Review and analyze security documentation.
• Conduct assessments of security functionality.
• Collaborate with product teams to identify vulnerabilities.
• Prepare evaluation reports outlining findings.

Conocimientos

Analytical skills

Problem-solving skills

Team collaboration

Organizational skills

English language skills

Educación

Bachelor's or Master's degree in a technical field

Herramientas

Testing tools and methodologies

Descripción del empleo

Company Description

SGS Brightsight is part of SGS – the world's leading testing, inspection and certification company. At SGS Brightsight, we support companies in getting their products ready and in compliance with the latest security regulations and requirements. With over 35 years of experience in evaluating IT products in different industries, we evaluate these products against requirements set by governmental and private schemes. SGS Brightsight has been a Common Criteria and EMVCo hardware lab since 2002.

Job Description

We are seeking a highly skilled and detail-oriented professional to join our team as a Common Criteria Evaluator. As a Common Criteria Evaluator, you will be responsible for evaluating and assessing the security functionality of information technology products based on the Common Criteria standard. Your role will involve conducting thorough evaluations, analyzing security documentation and providing detailed reports and recommendations. You will collaborate closely with cross-functional teams and contribute to the overall improvement of product security and compliance. We are looking for people with a fascination for IT security. You will join a multidisciplinary team to execute security evaluations on state-of-the-art products such as trusted execution environment, hypervisor, real-time operating systems, artificial intelligence, secure elements, network devices, key managers, hardware security modules, etc.

Responsibilities

• Perform comprehensive evaluations of information technology products based on the Common Criteria standard
• Review and analyze security documentation, including security policies, specifications, and test plans
• Conduct thorough assessments of security functionality, vulnerability analysis, and risk management practices
• Utilize testing tools, methodologies, and frameworks to assess the security of products
• Collaborate with product development teams to identify potential security vulnerabilities and propose mitigation strategies
• Prepare detailed evaluation reports outlining findings, analysis, and recommendations
• Stay updated on the latest developments in the field of Common Criteria and security evaluation methodologies
• Collaborate with external evaluators, vendors, and clients to ensure compliance with relevant standards
• Participate in the improvement and development of evaluation processes, methodologies, and best practices

Qualifications

Must

You have a Bachelor's or Master's degree in a technical field of study (computer science, telecommunications, electronics, physics, mathematics)

You have strong analytical and problem-solving skills with attention to detail

You can work effectively both independently and collaboratively in a team environment

You have strong organizational skills with the ability to prioritize tasks and meet deadlines

You have English language skills

Desired

Solid understanding of security principles, cryptographic algorithms, and security protocols

Knowledge / experience in ISO27001, Common Criteria, SESIP, PSA, CSA, LINCE, NESAS, PCI

Knowledge / experience in Smartcards, HSM, ARM, cryptography, web, and networking technologies

Experience in conducting security evaluations, vulnerability assessments, or penetration testing

Additional Information

SGS Brightsight provides a very good training program, from the basics to expert level. We offer a supportive work environment that fosters professional growth and development. We offer a competitive salary package based on the candidate.

At SGS Brightsight You Will

Be part of a multicultural team with highly motivated colleagues from all over the world

Work for the recognized global leader in security evaluations

Work with all major developers on their latest innovations

Enjoy an informal and intellectually challenging work environment

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Retail Office Equipment, Consumer Services, and Oil and Gas

J-18808-Ljbffr