IoT/IIoT Cybersecurity Engineer

TÜV SÜD; Portsmouth; Hybrid; GBP 40,000 - 80,000; Full time

Job description

Tasks/Aufgaben

We are looking for an IoT/IIoT cybersecurity engineer, in a hybrid home and laboratory position, headquartered in the UK to strengthen our IOT cybersecurity team. Your primary objective will be to deliver cybersecurity assessment and certification evaluation of products and components. Examples of the tasks include, but are not limited to: assessment to latest cybersecurity standards, penetration testing (IoT and WebApp), threat modelling, firmware investigation, code analysis, etc.

This service will be provided to external clients, who will predominantly be manufacturers of wired and wireless IoT/IIoT devices. You will be part of a dynamic, professional global team whose core values include operating with integrity, being solutions orientated and being committed to building and sustaining long-term relationships with our customers.

You will regularly engage with customers and attend to customer requirements and, using your technical expertise, you will contribute to the development and scaling of a robust product certification framework. Your role will include testing products as well as contributing to the development of an evolving and dynamic cyber assessment service.

The opportunity offers a competitive salary package and a modern working environment with a subsidised on-site restaurant and gym and support in finding local accommodation if required.

Main Duties & Responsibilities:

1. Perform assessments to the latest cybersecurity regulations, standards and guidelines.
2. Perform security reviews and testing of IOT hardware devices, including application design, embedded software, web applications, web services and mobile applications to bespoke test programs and the latest regulatory cybersecurity requirements.
3. Conduct hardware penetration testing.
4. Skilled in the use of the appropriate software tools used in assessments and penetration.
5. Engage with customers, understand their products and assessment requirements, and define bespoke test programs based upon our customer needs.
6. Actively contribute to the development of the TUV SUD security program with a focus on IIoT/IoT devices.
7. Participate and contribute on global cybersecurity regulatory standards committees.
8. Provide training to customers on the interpretation of regulatory standards and best practice.
9. Fluent written and spoken English (other language skills would be desirable).

Qualifications/Qualifikationen

Essential Criteria:

1. Relevant Cybersecurity qualification, preferably a cybersecurity degree (BSc/MSc/PhD) or equivalent cybersecurity qualification.
2. Experience in penetration testing (SW/HW) or similar offensive security.
3. A commitment to customer service excellence.
4. Strong analytical skills and efficient problem solving.
5. Ability to work unsupervised, under pressure and meet deadlines.
6. Creative with strong commitment to quality and excellence.

Desirable Criteria:

1. Assessment experience to EN 303 645, EN 18031-x series of standards, NIST 8259, NIST CSF, etc.
2. Additional cybersecurity credentials such as OWASP, OSCP, CISSP, etc.
3. Knowledge of security architecture design and applying regulatory guidance on cybersecurity assessment methodologies for risk management.
4. Practical knowledge with the development and implementation of electronic, network, or data security related controls (encryption, digital signatures, secure boot, access control, password management).
5. Understanding how to implement security activities such as vulnerability and patch management, threat intelligence, etc.
6. Hands-on practical knowledge with reverse engineering and/or vulnerability testing tools and techniques.
7. Experience in common scripting languages such as Python, Ruby, LUA, Powershell or BASH and at least one development language e.g. Java, C, C# or similar would benefit the role.
8. Experience in product development and testing.