Cybersecurity Evaluator

Role Overview

We are seeking a detail-oriented Cybersecurity Evaluator to conduct security evaluations and technical assessments of software, embedded devices, network products and connected systems.

The successful candidate will review security documentation, analyse product architecture and implementation evidence, develop and execute security tests, investigate potential vulnerabilities, and prepare clear, evidence-based evaluation reports.

Key Responsibilities

• Conduct cybersecurity evaluations under frameworks such as Common Criteria, the Cybersecurity Labelling Scheme and other applicable product-security schemes.
• Review Security Targets, design specifications, user guidance, test documentation and life-cycle evidence for consistency, completeness and sufficiency.
• Develop and execute functional, vulnerability and penetration tests for software, embedded devices and network products.
• Analyse product attack surfaces, security controls, firmware and publicly known vulnerabilities.
• Prepare evaluation analyses, test reports, clarification requests and evidence-based verdicts.
• Maintain traceability between security requirements, product design, implementation and test results.
• Coordinate evaluation activities with clients, developers, internal teams and relevant authorities.
• Support laboratory capability development in embedded, IoT, firmware, network, web and API security.
• Maintain project records, technical evidence and controlled documentation.

Requirements

• Bachelor’s degree in Computer Engineering, Electrical or Electronic Engineering, Computer Science or a related discipline.
• Good understanding of authentication, access control, cryptography, network security, secure software development and vulnerability management.
• Knowledge in C, C++, Java, Python or Linux.
• Strong analytical, technical writing and problem-solving skills.
• Ability to review complex technical documentation and produce clear, defensible conclusions.
• Good written and verbal communication skills.
• Ability to work independently while coordinating effectively with project stakeholders.

Advantageous Experience

• Relevant experience in cybersecurity evaluation, security testing, VA/PT, product security, software or firmware development or embedded systems.
• Common Criteria, CLS or other product-security evaluation schemes.
• Vulnerability assessment and penetration testing.
• Embedded-device testing or firmware analysis.
• Tools such as Wireshark, Nmap, Burp Suite, Ghidra or Binwalk.
• Hardware interfaces such as UART, JTAG/SWD, SPI, I²C or external flash.
• Relevant certifications such as CISSP, OSCP or equivalent.

Key Attributes

• Analytical and evidence-driven
• Meticulous and well organised
• Technically curious
• Independent and impartial
• Clear and professional communicator
• Comfortable working with developers, clients, auditors and authorities

More experienced candidates may be considered for a senior appointment.