IoT Security Compliance Engineer

ENGINEERINGUK; Hemel Hempstead; On-site; GBP 40,000 - 60,000

Job description

Great that you're thinking about a career with BSI!

Job Title: IoT Security Compliance Engineer

Location: Hemel Hempstead

Job Type: Permanent, Full-time

Salary: Dependant on Experience

Are you an experienced cyber security professional seeking a diverse and meaningful career in IoT cyber security standards? With exposure to an array of smart home and connected IoT devices, your role as our IoT Security Compliance Engineer will involve conducting security testing of IoT smart devices for our global clients, to ensure products meet security compliance to the relevant regulatory cybersecurity schemes under type test and audit tests.

To be successful in this role you will bring experience across device/hardware cybersecurity, debugging interfaces, wireless & wired communications (WIFI, Bluetooth, Ethernet, ZiBee, Z-Wave etc), firmware reverse engineering, and source code analysis.

Key Responsibilities:

• Testing IoT product samples in line with KPI budget.
• Assist to maintain and improve test techniques for the IoT laboratory.
• Research and identify new potential test equipment for the IoT laboratory.
• Ensure that test SMOs are booked, time sheeted and billed correctly.
• Support the maintenance of The UKAS accreditation for the IoT laboratory, ensuring that compliance processes are established, implemented, and maintained.
• Provide technical assistance with BSI customers during any potential certification journey.
• Manage client's samples and testing to ensure that agreed timelines are met for the testing of samples.
• Assist in the maintenance and continuous improvement on automated reporting tools.

Required Skills & Experience:

• Experience managing and operating Linux and Windows systems.
• Experience in Hardware (electronics) cybersecurity testing.
• Experience in infrastructure cybersecurity testing.
• Familiarity with compliance cybersecurity standards, such as:
• ETSI EN 303 645 / TS 103 701
• IEC 62443-4
• OWASP ASVS / MASVS
• Familiarity / Experience with standards for competence of testing and calibration (EN ISO/IEC 17025).
• Some demonstrable practical experience with IoT devices/applications.
• Some practical experience with at least one high-level programming language.
• Experience / Familiarity with Professional technical report writing.
• Good communication skills and the ability to write clear and concise reports.

Desirable Skills & Experience:

• Knowledge / experience in Industrial Control systems (Cybersecurity aspects).
• Knowledge / experience in any of the following communication technologies:
• Mobile (2G/3G/4G/5G)
• Bluetooth
• ZigBee
• Z-Wave
• Lora WAN
• NB-IoT
• Experience with working with front-end and back-end systems
• Experience of:
• CREST (any from the Incident response family)
• Offensive security (PEN-200, PEN-210, PEN-300)
• Cyber-Scheme (CSFL, CSTM, CSTL)

BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training, and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Life Assurance.

Do you believe the world deserves excellence?

We are proud to be the business improvement company for other organisations to become more sustainable and resilient and finally to inspire trust in their products, systems, services, and the world we live in.

If you want to contribute to this inspiring challenge, bring your open and enthusiastic mindset to our dynamic team, apply now and become part of the BSI family!