IoT Security Analyst

BSI; Hemel Hempstead; On-site; GBP 51,000 - 60,000; Full time

Job summary

A global standards organization in Hemel Hempstead is seeking an experienced IoT Security Analyst to conduct security testing for smart devices. The role requires expertise in device hardware cybersecurity and familiarity with various communication technologies. Applicants should have strong technical reporting skills and effective communication abilities. This position offers opportunities for growth and competitive benefits.

Benefits

Annual Bonus

Contribution Based Pension

Private Healthcare

27 Days Annual Leave + Bank Holidays

Life Assurance

Qualifications

• Experience managing and operating Linux and Windows systems.
• Experience in hardware (electronics) cybersecurity testing.
• Experience in infrastructure cybersecurity testing.
• Familiarity with compliance cybersecurity standards.

Responsibilities

• Assess the security of connected (IoT) devices.
• Maintain and improve test techniques for the IoT laboratory.
• Research and identify new potential test equipment.
• Ensure compliance with UKAS accreditation.

Skills

Device/hardware cybersecurity

Debugging interfaces

Wireless & wired communications

Firmware reverse engineering

Source code analysis

Technical report writing

Communication skills

Job description

We exist to create positive change for people and the planet. Join us and make a difference too!

Job Title: IoT Security Analyst

Location: Hemel Hempstead

Job Type: Permanent, Full-time

Salary: Up to £60,000 dependant on experience

Are you an experienced cyber security professional seeking a diverse and meaningful career in IoT cyber security standards?

With exposure to an array of smart home and connected IoT devices, your role as our IOT Security Analyst/Test Engineer will involve conducting security testing of IoT smart devices for our global clients, to ensure products meet security compliance to the relevant regulatory cybersecurity schemes under type test and audit tests.

To be successful in this role you will bring experience across device/hardware cybersecurity, debugging interfaces, wireless & wired communications (WIFI, Bluetooth, Ethernet, ZigBee, Z-Wave etc), firmware reverse engineering, and source code analysis.

Key Responsibilities:

• Assessing the security of connected (IoT) devices across their lifecycle, from firmware to communication interfaces
• Assist to maintain and improve test techniques for the IoT laboratory
• Research and identify new potential test equipment for the IoT laboratory
• Ensure that test SMOs are booked, time sheeted and billed correctly
• Support the maintenance of The UKAS accreditation for the IoT laboratory, ensuring that compliance processes are established, implemented, and maintained and ensuring that they continue to meet accreditation requirements and remains effective, efficient and fit for purpose
• Provide technical assistance with BSI customers, during any potential certification journey
• Manage client’s samples and testing to ensure that agreed timelines are met for the testing of samples
• Assist in the maintenance and continuous improvement on automated reporting tools

Required Skills & Experience:

• Experience managing and operating Linux and Windows systems
• Experience in hardware (electronics) cybersecurity testing
• Experience in infrastructure cybersecurity testing
• Familiarity with compliance cybersecurity standards, such as:
  • ETSI EN 303 645 / TS 103 701
  • IEC 62443-4
  • EN 18031
  • UL 2900
  • OWASP ASVS / MASVS
• Familiarity / Experience with standards for competence of testing and calibration (EN ISO/IEC 17025)
• Some demonstrable practical experience with IoT devices/applications
• Some practical experience with at least one high level programming language
• Experience with professional technical report writing.
• Good communication skills and the ability to write clear and concise reports

Desirable Skills & Experience:

• Knowledge / experience in Industrial Control systems (Cybersecurity aspects)
• Knowledge / experience in any of the following communication technologies:
  • Mobile (2G/3G/4G/5G)
  • Bluetooth
  • ZigBee
  • Z-Wave
  • Lora WAN
  • NB-IoT
• Experience with working with front-end and back-end systems
• Experience of:

CREST (any from the Incident response family)

Offensive security (PEN-200, PEN-210, PEN-300)

Cyber-Scheme (CSFL, CSTM, CSTL)

BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training, and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Life Assurance.

#LI-GC1

#LI-ONSITE

About Us

BSI is a business improvement and standards company and for over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives.

Today BSI partners with more than 77,500 clients in 195 countries and engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments.

Utilizing its extensive expertise in key industry sectors - including automotive, aerospace, built environment, food and retail, and healthcare - BSI delivers on its purpose by helping its clients fulfil theirs.

Living by our core values of Client-Centricity, Agility, and Collaboration, BSI provides organizations with the confidence to grow by partnering with them to tackle society’s critical issues – from climate change to building trust in digital transformation and everything in between - to accelerate progress towards a better society and a sustainable world.

BSI is an Equal Opportunity Employer dedicated to fostering a diverse and inclusive workplace.