Aufgaben
TÜV SÜD is expanding its expertise in the growing IoT area and is expanding the team with an IoT Security Engineer position located in Denmark or Sweden. This is an exciting position in a market-leading company.
The Position:
The primary objective of this position is to work with customers in Sweden, Denmark, and internationally to deliver cybersecurity assessments and certification evaluations of products and components, predominantly to manufacturers of wired and wireless IoT and IIoT devices.
You will collaborate with customers, using your technical expertise to deliver the services and evolve the cybersecurity assessment services. You will also cooperate closely with the TÜV SÜD global teams.
You will have a direct report to the Cyber Security Lab manager.
We expect the candidate to be in Denmark or Sweden. When not traveling, you can work from TÜV SÜD offices in Copenhagen or Stockholm, or your Home Office. The expected amount of travel is 15-25%
Responsibilities:
Perform assessments to the latest cybersecurity regulations, standards, and guidelines.
Perform security reviews and testing of IOT and IIoT hardware devices, including application design, embedded software, web applications, web services, and mobile applications, to bespoke test programs and the latest regulatory cybersecurity requirements.
Hardware penetration testing.
Engage with customers, understand their products and assessment requirements, and define customized test programs based on our customers’ needs.
Actively contribute to developing the TUV SUD security program focusing on IIoT/IoT devices.
Participate and contribute to global cybersecurity regulatory standards committees.
Provide training to customers on the interpretation of regulatory standards and best practices.
Qualifikationen
The Candidate:
We seek an experienced IoT Security professional with documented experience and qualifications in cybersecurity. You like working in an international environment, taking initiative, and making a difference.
You also like managing your time to influence the client interaction process for successful results.
Education and Experience:
Relevant Cybersecurity qualification, preferably a cybersecurity degree (BSc/MSc/PhD) or equivalent cybersecurity qualification. Minimum 3 years of experience.
Assessment experience to EN 18031-x series of standards, EN 303 645, NIST 8259, NIST CSF, etc.
Experience in IoT penetration testing (SW/HW) or similar offensive security. Skilled in using the appropriate software tools in assessments and penetration testing.
Fluent in English.
Additional desirable Experience:
Additional cybersecurity credentials such as OWASP, OSCP, CISSP, etc.
Knowledge of security architecture design and applying regulatory guidance on cybersecurity assessment methodologies for risk management.
Practical knowledge with developing and implementing electronic, network, or data security-related controls (encryption, digital signatures, secure boot, access control, password management).
Understanding how to implement security activities such as vulnerability and patch management, threat intelligence, etc.
Hands-on practical knowledge with reverse engineering and/or vulnerability testing tools and techniques.
Experience in common scripting languages like Python, Ruby, LUA, Powershell, or BASH, and at least one development language, e.g., Java, C, C#, or similar, would benefit the role.
Experience in product development and testing.
Knowledge of RF technologies (Cellular, Basestation, Wifi, BT, etc.).
Personal Qualifications:
A commitment to customer service excellence.
Strong analytical skills and efficient problem-solving.
Ability to work unsupervised, under pressure, and meet deadlines.
Excellent communication skills.