Cybersecurity Engineer

TÜV SÜD Group – A global leader in the field of testing, inspection, management system certification and product certification renowned for quality, integrity and technical excellence.

Established more than 150 years ago in Germany, TÜV SÜD Group is a leading global provider of technical services with more than 30,000 highly skilled employees across 1,000 offices worldwide. TÜV SÜD Group offers a wide range of testing & product certification, inspection, auditing & system certification, training and knowledge services. We are a premium quality, safety, and sustainability solutions provider.

As a Cybersecurity Engineer, you will be part of a team that is responsible for business and customers’ success. Key objectives include ensuring customers’ products, inclusive and notwithstanding of software, hardware and related components having the appropriate security mechanisms in place.

Key Responsibilities

• Perform cybersecurity assessments on Consumer, Industrial and Medical related products and systems.

• Evaluate and perform attack surface analysis on IoT products and respective network and systems.

• Conduct Vulnerability Assessments and Penetration Testing (i.e. Web, Mobile, Cloud and API) in accordance to various standards on products and systems

• Develop testing specifications and methodology based on international standards.

• Conduct source code reviews and threat modelling pertaining to products

• Research and keep up to date with the current threat landscape, attack vectors and testing techniques with regards to IoT technologies

• Collaboration across various teams to ensure comprehensive service delivery.

• Product conformity testing on any of the following requirements but not limited to:

• IoT cyber security requirements (ETSI EN 303 645, NIST IR 8259A, CSA CLS, IMDA TS RG-SEC, etc.)

• OT cyber security requirements (IEC 62443 series, ISASecure, etc.)

• Medical products cybersecurity requirements (MDR, FDA, IEC 81001, etc.)

Key Requirements

• Diploma or Degree in Electrical & Electronics/Computer/Information Engineering or Computer Science, Information Systems/Security or equivalent.
• At least 4 years of experience relating to cybersecurity and/or products-based technologies.
• Familiarity with testing frameworks such as OWASP Top 10, PTES, OSSTMM, MITRE
• Knowledge of networking and communication protocols, where Professional certification in Comptia Sec+, Network+ or equivalent is good to have.
• Professional certification such as CREST, OSCP, eCPPT, eMAPT, GPEN, PenTest+ would be an added advantage.
• Good understanding and knowledge of IoT-based technologies and architecture.
• Hands-on experience in performing vulnerability assessments and penetration testing.
• Results and service-oriented individual who possesses initiative, good communication and written skills.
• A proactive team player with the ability to work independently and within the team in complex projects with variable timelines.
• On the job training will be provided as required

We test, we audit, we inspect, we advise. We never stop challenging ourselves for the safety of society and its people. We breathe technology, we strive for professional excellence, and we leave a mark. We take the future into our hands. We are TÜV SÜD Group.

Work Area: Digital, IT, IT Security & Safety

Country/Region: Singapore

Job Location: Singapore

Working Model : Onsite

Employment Type: Full time / temporary

Company: TUV SUD PSB Pte. Ltd.

Org Unit Code Requisition ID: 6904