Common Criteria Evaluator

Company DescriptionSGS Brightsight is part of SGS – the world's leading testing, inspection and certification company. At SGS Brightsight, we support companies in getting their products ready and in compliance with the latest security regulations and requirements. With over 35 years of experience in evaluating IT products in different industries, we evaluate these products against requirements set by governmental and private schemes. SGS Brightsight has been a Common Criteria and EMVCo hardware lab since 2002.Job DescriptionWe are seeking a highly skilled and detail-oriented professional to join our team as a Common Criteria Evaluator. As a Common Criteria Evaluator, you will be responsible for evaluating and assessing the security functionality of information technology products based on the Common Criteria standard. Your role will involve conducting thorough evaluations, analyzing security documentation and providing detailed reports and recommendations. You will collaborate closely with cross-functional teams and contribute to the overall improvement of product security and compliance. We are looking for people with a fascination for IT security. You will join a multidisciplinary team to execute security evaluations on state-of-the-art products such as trusted execution environment, hypervisor, real-time operating systems, artificial intelligence, secure elements, network devices, key managers, hardware security modules, etc.ResponsibilitiesPerform comprehensive evaluations of information technology products based on the Common Criteria standardReview and analyze security documentation, including security policies, specifications, and test plansConduct thorough assessments of security functionality, vulnerability analysis, and risk management practicesUtilize testing tools, methodologies, and frameworks to assess the security of productsCollaborate with product development teams to identify potential security vulnerabilities and propose mitigation strategiesPrepare detailed evaluation reports outlining findings, analysis, and recommendationsStay updated on the latest developments in the field of Common Criteria and security evaluation methodologiesCollaborate with external evaluators, vendors, and clients to ensure compliance with relevant standardsParticipate in the improvement and development of evaluation processes, methodologies, and best practicesQualificationsMustYou have a Bachelor's or Master's degree in a technical field of study (computer science, telecommunications, electronics, physics, mathematics)You have strong analytical and problem-solving skills with attention to detailYou can work effectively both independently and collaboratively in a team environmentYou have strong organizational skills with the ability to prioritize tasks and meet deadlinesYou have English language skillsDesiredSolid understanding of security principles, cryptographic algorithms, and security protocolsKnowledge/experience in ISO27001, Common Criteria, SESIP, PSA, CSA, LINCE, NESAS, PCIKnowledge/experience in Smartcards, HSM, ARM, cryptography, web, and networking technologiesExperience in conducting security evaluations, vulnerability assessments, or penetration testingAdditional InformationSGS Brightsight provides a very good training program, from the basics to expert level. We offer a supportive work environment that fosters professional growth and development. We offer a competitive salary package based on the candidate.At SGS Brightsight You WillBe part of a multicultural team with highly motivated colleagues from all over the worldWork for the recognized global leader in security evaluationsWork with all major developers on their latest innovationsEnjoy an informal and intellectually challenging work environmentSeniority levelMid-Senior levelEmployment typeFull-timeJob functionInformation TechnologyIndustriesRetail Office Equipment, Consumer Services, and Oil and Gas #J-18808-Ljbffr