Cybersecurity Pen Tester

Cybersecurity Pen Tester Your tasks

Position Summary:

This position is responsible for focusing domain areas of expertise as well as a good breadth of experience across Application Penetration Testing, Thick Client Penetration Testing, Web Application Penetration Testing, Mobile Application Penetration Testing (iOS and Android), Medical IoT devices Penetration Testing, fuzz testing and Open-Source Intelligence and Physical Security Testing.

Responsibilities:

Perform medical device vulnerability scans, fuzz testing, penetration testing, security code reviews, and reverse engineering. Carrying out IOT penetration tests, application (mobile, MIoT and PC platform), network, systems, and infrastructure penetration tests and performing various aspects of vulnerability assessments / penetration tests across a wide variety of platforms and technologies in medical industry. Perform targeted testing activities to identify weaknesses and methods in which to exploit them.

Review threat models and perform security risk assessments of medical products

Helping evolve the knowledge of adversarial TTPs for medical devices and medical applications and apply that knowledge when evaluating and testing corporate resources. Adherence to the highest standards of safety, ethics, and professional conduct are critical requirements of this position.

Supporting project initiatives to assess vulnerabilities in medical devices and medical/health software assets (via penetration tests, testing policies and procedures, etc.).

Applying existing IT technical expertise to address cybersecurity related issues and challenges.

Keeping up to date with tools, countermeasures, threats and technologies.

Developing and refining tools, templates and methodologies.

Interpreting vulnerabilities, identifying weaknesses, exploiting them and escalate access.

Your qualifications

Higher degree in Information Security, Computer Science, Computer/Software Engineering, Electrical Engineering, or relevant work experience

Several years of professional experience in conducting IOT penetration testing, fuzz testing preferably in the medical sector (or other relevant sector).

Security knowledge in the areas: Operation system security, mobile OS Security, embedded operation system security, communication protocols (Bluetooth/BLE/WIFI etc.), medical protocols (DICOM etc.), threat modeling, common security testing tools.

Programming skills in Python, C/C++, C#, or similar for the purpose of code review and test automation

Excellent technical expertise (in both breadth and depth), written communication skills, time management skills, and the ability to communicate effectively with numerous lines of business representatives.

Experience with open source and commercial penetration testing security tools in an enterprise environment.

Proficiency with Windows, Unix/Linux, and mobile platform operating systems.

Comprehension of OWASP Top 10 (both web and (M)IoT), OSSTMM, PTES, NIST and able to understand and communicate findings to customers

Must be willing to work flexible hours; they must also be able to travel, as required. Comfortable working in a fast-paced environment

Additional Information

Equal Opportunity Employer - Disability and Veteran

TUV SUD America, Inc. is an equal opportunity, affirmative action employer and considers qualified applicants for employment without regard to race, color, creed, religion, ancestry, marital status, genetics, national origin, sex, sexual orientation, gender identity and expression, age, physical or mental disability, veteran status and those laws, directives, and regulations of Federal, State, and Local governing bodies or agencies. We participate in the E-Verify Employment Verification Program.

For more information on applicable equal employment regulations, please refer to the following: Labor Law 2024

Details Benefits

Paid vacation time

Retirement savings plans

Long-term-service awards

Wellness benefits

Sick leave

Competitive compensation

Flexible working hours

Family care benefits

Employee events

Structured professional development

Employment type

Full time / permanent

Work model

hybrid

Job location

New Brighton

Country

United States

Job category

Other Target Groups

Required experience

Professionals 3 - 5 years of experience

Organizational unit

TUV SUD America Inc.

Reference number

141547

Contact

TUV SUD Recruiting

1-800-888-0123careers.us@tuvsud.com Apply nowPrintAdd to my favorites Share About TUV SUD as Employer

At TUV SUD we are passionate about technology. Innovations impact our daily lives in countless ways, and we are dedicated to being a part of that progress. We test, we audit, we inspect, we advise. We never stop challenging ourselves for the safety of society and its people. We breathe technology, we strive for professional excellence, and we leave a mark. We take the future into our hands. We are TUV SUD.

Established more than 150 years ago in Germany, TUV SUD is a leading global provider of technical services with more than 28,000 highly skilled employees across 1,000 offices worldwide. For over 30 years, throughout 33 locations, it is TUV SUD America's priority to create a safer future. To protect people, property and the environment from technology-related risks; we drive consumer protection, digital transformation, sustainable development, and urbanization.

Find out more about TUV SUD

Location: New Brighton, MN, US

Posted Date: 12/1/2024