Cybersecurity Engineer

Tüv Süd Ag; Singapore; Hybrid; SGD 100,000 - 180,000; Full time

Job summary

TÜV SÜD PSB Pte. Ltd. is seeking a Cybersecurity Engineer to join the Digital, IT, IT Security & Safety team and help ensure product security across consumer, industrial and medical sectors.

The role covers vulnerability assessments, penetration testing, threat modelling and collaboration with cross-functional teams to deliver robust security testing services in line with international standards.

Qualifications

• Must have 4+ years of experience in cybersecurity and/or products-based technologies.
• Familiarity with security testing frameworks and standards (OWASP Top 10, PTES, OSSTMM, MITRE).
• Knowledge of networking protocols and security concepts; professional certifications are a plus (e.g., CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+).
• Experience with IoT security and product conformity testing is desirable.

Responsibilities

• Perform cybersecurity assessments on Consumer, Industrial and Medical products and systems.
• Evaluate attack surfaces on IoT products and networks.
• Conduct vulnerability assessments and penetration testing (Web, Mobile, Cloud, API) per standards.
• Develop testing specs and methodologies based on international standards.
• Review source code and perform threat modelling for products.
• Stay updated on current threats related to IoT technologies and collaborate across teams.

Skills

Cybersecurity expertise

Vulnerability assessment

Penetration testing

Threat modelling

IoT security

Education

Bachelor or higher in Electrical & Electronics/Computer/Information Engineering or Computer Science/Information Systems/Security

Tools

OWASP Top 10

PTES

OSSTMM

MITRE

CompTIA Sec+

Network+

Job description

TÜV SÜD Group – A global leader in the field of testing, inspection, management system certification and product certification renowned for quality, integrity and technical excellence.

Established more than 150 years ago in Germany, TÜV SÜD Group is a leading global provider of technical services with more than 30,000 highly skilled employees across 1,000 offices worldwide. TÜV SÜD Group offers a wide range of testing & product certification, inspection, auditing & system certification, training and knowledge services. We are a premium quality, safety, and sustainability solutions provider.

As a Cybersecurity Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.
• Evaluate and perform attack surface analysis on IoT products and respective network and systems.
• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems
• Develop testing specifications and methodology based on international standards.
• Conduct source code reviews and threat modelling pertaining to products
• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies
• Collaboration across various teams to ensure comprehensive service delivery.
• Product conformity testing on any of the following requirements but not limited to:
  • IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)
  • OT cyber security requirements (IEC 62443 series, ISASecure, etc.)
  • Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands‑on experience in performing vulnerability assessments and penetration testing.
• Results and service‑oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

We test, we audit, we inspect, we advise. We never stop challenging ourselves for the safety of society and its people. We breathe technology, we strive for professional excellence, and we leave a mark. We take the future into our hands. We are TÜV SÜD Group.

Work Area: Digital, IT, IT Security & Safety

Working Model: Onsite

Employment Type: Full time / temporary

Company: TUV SUD PSB Pte. Ltd.