Senior Offensive Security Specialist - Product Security

Bureau Veritas Cybersecurity; Amsterdam; Hybrid; EUR 49,000 - 75,000; Full time

Benefits offered by this job

Hybrid working policy

28 days holidays

Pension plan

Mobility options

Performance bonus (up to one month)

OpenUp platform access

Job summary

Bureau Veritas Cybersecurity is seeking a Senior Security Specialist to perform technical assessments of embedded products, software, or web/mobile applications in line with evaluation methodologies. You will lead assessments, interact with customers, and provide security consultancy on findings and mitigations.

You will work with a team of offensive security professionals across the Netherlands, with offices in Eindhoven and Amsterdam; role can be filled from either location, offering hybrid

Qualifications

• Bachelor’s or Master’s in a technical domain (required).
• Several years of relevant experience as a penetration tester.
• Affinity and experience with testing of embedded devices: IoT, hardware, firmware and electronics.
• Experience with code reviews in C, C++, Python, PHP (preferably low-level languages).
• Customer-oriented with ability to map needs to services and provide security consultancy.

Responsibilities

• Perform technical assessments of embedded products, software or web/mobile apps.
• Act as technical lead for assessments and discuss findings with customers.
• Report assessment results and discuss next steps with clients.
• Align with customers to understand testing needs and provide consultancy.
• Support account managers with project approach and effort estimation.
• Contribute to internal/external knowledge via training, blogs, articles.

Skills

Penetration testing

Embedded device testing

Code reviews (C/C++, Python, PHP)

IoT security

Customer-facing security consulting

Education

Bachelor’s or Master’s in a technical domain

Job description

Whether we talk about IoT consumer products, automotive, medical devices, or industrial control systems, security of embedded systems is important and very often used in solutions, which combine devices, systems, infrastructure, web and mobile applications. Within this fast evolving landscape, Bureau Veritas Cybersecurity gets many customer requests to validate these solutions. Moreover, we are actively working on standardization of security assessments for these various industries.

What we are looking for:

In this context we are looking for a Senior Security Specialist. As a Senior Security Specialist you will perform the technical assessments of either embedded products, software or web/mobile applications, in line with the applicable security evaluation methodology. This can be either a “free-form” penetration test, or testing in line with the requirements of a specific standard or certification scheme. Direct interaction with the customer for the purpose of defining the assessment scope, as well as during the assessment execution is expected as well. Finally, the role will provide opportunities for security consultancy (technical topics) given to the customer, especially regarding the way in which they can address the security issues resulting from the conducted testing.

As a Senior Security Specialist you will:

• Perform the technical assessments for the targets in scope, in line with the agreed assessment methodology;
• Be a technical lead for performed technical assessments (especially in the senior role);
• Get involved in both technical (content specific) as well as management level discussions with external customers, in order to explain or support the execution of security assessment (and certification) projects;
• Report the results of the assessment, and directly interact with the customers in order to explain them the results of the assessment and way forward;
• Align with the customers for the purpose of understanding their needs in terms of testing;
• Provide consultancy for the customers, in order to address their security needs or findings;
• Support Bureau Veritas Cybersecurity’s Account Managers in the process of defining a lead, by providing the intended project approach and effort estimation;
• Support and execute allocated R&D projects;
• Contribute substantially to internal/external knowledge sharing via training courses, blog posts, articles, brochures, news items;
• Train and present for clients and internal;
• Perform tools and methods validation projects and state results and their interpretations in a report.

You have:

• A completed Bachelor’s or Master’s, in a relevant (technical) domain;
• At least several years of relevant working experience as a penetration tester;
• Affinity and experience with testing of embedded devices: IoT, hardware, firmware and electronics;
• Experience with performing code reviews such as C, C#, C++, Python, PHP and preferably with low level languages ;
• A strong drive to understand the needs of the customers, and map them to possible offered services;
• Passion about maintaining and further developing the range of offered services;
• Customer oriented mentality, focused on delivering what it is expected in the required timeframe, while at the same time not cutting on the level of technical quality.

What you can expect with us:

Together with a great team of offensive professionals, you will have the opportunity to develop and expand your knowledge and expertise in cybersecurity.

We have offices in the two main technology centers of the Netherlands: Eindhoven and Amsterdam. This role can be filled from either location.

• Growth opportunities: We are a fast growing company and you will have the opportunity to grow in this. Whether it involves responsibilities, increasing your visibility within and outside the organization, or attending training and education, at Bureau Veritas Cybersecurity your career development is key.
• Cool projects: You will work with a wide range of renowned clients and customers. This gives you the opportunity to demonstrate your expertise and apply your skills in different environments, allowing you to continue to grow and learn. We do not only offer opportunities for projects within the Netherlands. There will also be opportunities internationally.
• Culture: At Bureau Veritas Cybersecurity, we value celebrating successes and creating an enjoyable work environment. We regularly organize fun activities ranging from annual ski trips to various wine and beer tastings, sailing trips, barbecues and more. Here, team building is key.

We offer:

• Compensation: a gross salary between €4.400,- and €6.700,- per month based on fulltime employment and depending on your skills, educational background and work experience
• Connectivity allowance: a fixed net allowance of €100,- per month (based on a 40-hour workweek) for internet and telephone.
• Employee vitality: we realise that exercise boosts health, mood, and concentration so we support it with a €30 contribution out of your gross monthly salary (tax efficient!) with choices of sports subscriptions via Bedrijfsfitness NL.
• Holidays: 28 days (based on a 40-hour work week) and the option to buy 10 extra holidays.
• Hybrid working: remote working and working abroad policy. You can work from another country for a maximum of 2 months per calendar year.
• Mobility: our mobility policy offers flexible options designed to make commuting and business travel efficient, fair, and cost-conscious. Depending on your position there are three regulations for traveling: the Mobility Standard Regulation, the Mobility Plus Regulation and, in exceptional cases, the Lease Car Regulation.
• Pension: each month, the employee and BV Cyber commit respectively 5% and 6% of the pensionable salary individually, totalling 11%, to be invested in a life cycle fund. In addition to the standard contributions made by BV Cyber and the employee, there is also flexibility to opt for voluntary additional contributions on a monthly or yearly basis.
• Performance bonus: this a reflection of the individual achievements and performance and the profit of the company throughout the previous year. The bonus can amount to a month's salary.
• Wellbeing: our policy is built on three core pillars: prevention, early identification, and meaningful support. We're committed to creating a workplace where you can thrive both professionally and personally. We offer the OpenUp.com platform services for employees and family members including the Financial Wellbeing module.

Are you interested in this vacancy?

Note: Pre-employment screening, including a Certificate of Conduct (VOG), and assessment are part of the recruitment process.