Job Description
We are seeking a highly skilled and detail-oriented professional to join our team as a cybersecurity evaluator. You will join a multidisciplinary team to execute security evaluations on state-of-the-art network products (firewalls, routers, switches…), security services (EDR, EPP, SIEM, IDS-IPS...), operating systems, applications, etc.
Responsibilities
- Perform comprehensive evaluations of information technology products based on international standards like Common Criteria or LINCE standards.
- Review and analyze security documentation, including security policies, specifications and test plans
- Conduct thorough assessments of security functionality, vulnerability analysis and risk management practices
- Utilize testing tools, methodologies and frameworks to assess the security of products
- Prepare detailed evaluation reports outlining findings, analysis and recommendations Stay updated on the latest developments in the field of Common Criteria and security evaluation methodologies
- Participate in the improvement and development of evaluation processes, methodologies and best practices Provide guidance and support to internal teams reg
Qualifications
Must
- Experience and focus on cybersecurity
- You have a bachelor's or master's degree in a technical field of study (computer science, telecommunications, electronics, physics, mathematics)
- You have strong analytical and problem-solving skills with attention to detail
- You can work effectively both independently and collaboratively in a team environment
- You have strong organizational skills with the ability to prioritize tasks and meet deadlines You have English language skills
Desired
- Experience with cybersecurity tooling such as Nmap, Nessus, Wireshark, Burp, Scapy, etc.
- Solid understanding of security principles, cryptographic algorithms and security protocols
- Experience in the defense and aerospace sectors
- Strong understanding of tactical communication systems, secure military communications, and associated cybersecurity requirements.
- Knowledge/experience in ISO27001, Common Criteria, SESIP, PSA, CSA, LINCE, MEMEC, CICLON, NESAS, PCI
- Knowledge/experience in Smartcards, HSM, ARM, cryptography, web, networking technologies
- Experience in conducting security evaluations, vulnerability assessments or penetration testing
📌 Security evaluator (Madrid)
🏢 SGS
📍 Madrid