Log In
Sign Up
Design how trust is verified in advanced electronic systems. You will lead the evaluation of high-assurance hardware and software components against globally recognised security standards, directly influencing whether technology can be trusted in critical use.
The Role
You will evaluate hardware and software products to determine whether they meet strict security standards. This is a hands-on role in a controlled lab environment, where you will analyse threats, test for vulnerabilities, and validate security features through structured and repeatable methods.
Alongside executing tests, you will help define how testing is done, improving methodologies, guiding the team, and ensuring results are clear, accurate, and audit-ready. The role combines practical testing, technical analysis, and team leadership in a highly structured evaluation setting.
Key responsibilities:
- Analyse target products and identify threat models for electronic components under evaluation
- Develop and execute Evaluation Work Plans aligned with CC scheme rules and CEM
- Conduct design, code, and documentation reviews to verify security functional and assurance requirements
- Perform vulnerability analysis, penetration testing, fuzzing, and specialised testing (e.g. side-channel, cryptographic validation) as required
- Build and maintain repeatable, traceable test methodologies for hardware and virtual environments in line with ISO/IEC 17025
- Produce audit-ready Evaluation Technical Reports, ensuring full traceability and chain-of-custody
- Lead and mentor a team of engineers, driving quality, consistency, and technical growth
- Contribute to lab capability development, including new attack techniques, tools, and internal training
What You’ll Bring
- Proven experience testing and evaluating hardware components (e.g. microchips, SoCs), including tamper resistance, secure boot, and root of trust validation
- Strong expertise in software and firmware vulnerability analysis, including identification of code weaknesses and insecure configurations
- At least 5 years in IT security evaluation, penetration testing, or secure product development
- Practical experience with Common Criteria (CC), CEM, or comparable standards (e.g. FIPS 140)
- Ability to perform structured threat analysis and translate findings into rigorous, repeatable test plans
- Experience producing high-quality, audit-ready technical documentation
- Hands-on experience with side-channel analysis and fault injection techniques
- Reverse engineering capabilities across hardware or firmware
- Familiarity with JTAG, debugging interfaces, or low-level hardware access methods
- Strong grounding in cryptographic principles and implementation testing
Why This Role
This is not conventional testing, it is evaluation at the highest assurance level, where you actively attempt to break systems to prove they are secure. You will work at the intersection of hardware, software, and cryptography, applying advanced attack techniques within a structured global framework. The role offers both technical depth and influence, shaping how complex systems are trusted in critical environments.
If this role aligns with your experience and interests, apply now.