As a Senior Security Analyst, you will evaluate and test our IMS customers. This includes using test automation tools, analyzing and validating test results and reporting to the customers. The Security Analyst evaluates the security of IT products, such as network devices, encryption software, mobile devices, payment terminals, e-Passports, smartcards, etc. based on certain scheme requirements, such as Common Criteria and common.SECC etc. This will include the development document review, IT products analysis, the development and realization of penetration tests, and the support and training of evaluation engineers.

This role will be based in the Netherlands and will follow an onsite working arrangement.

• Conduct IT product security evaluation work activities based on scheme requirements, such as Common Criteria, Common.SECC etc.
• Perform customer site audit when needed: it requires travelling to customer premises.
• Investigate possible attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking results, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• A degree (or equivalent) in information technology, cryptography, or computer science or equivalent proving your analytical skills and technical approach.
• Experience in Information Security, Testing Inspection Certification Industry, and Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• COMMON CRITERIA NETHERLANDS EVALUATOR (under NSCIB) Certified is an added advantage.
• Experience in evaluating/testing/developing Smartcard and similar devices: IC, SoC, MCU, and Embedded Software will be an advantage.
• Comfortable in analyzing various standards, frameworks, and regulations
• Will be able to demonstrate aptitude and a strong potential to learn quickly.
• High analytical skills, and attention to detail.
• Ability to work independently, to be innovative and creative.
• Ability to communicate with clarity and efficiency.
• Enjoys working in a team and engaging their colleagues.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.

• Like working towards a larger goal and being willing to take the initiative into your own hands.Good at communicating and can convey messages to both technical and business audiences.

• Mission: For UL Solutions, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply ingrained in everything we do. You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
  People : Ask any UL Solutions employee what they love most about working here, and you’ll almost always hear, “the people”. Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results.
  Interesting work: Your work at UL Solutions will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles, you will get international experience working with colleagues around the world.
  Grow & Achieve: Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.
  Working at UL Solutions is an exciting journey that twists and turns daily. We thrive in the twists and revel in the turns. This is our every day. This is our normal.
  Curious? To learn more about us and the work we do, visit our company page https://www.ul.com/

  LI-SG1

LI-Onsite

A global leader in applied safety science, UL Solutions (NYSE: ULS) transforms safety, security and sustainability challenges into opportunities for customers in more than 110 countries. UL Solutions delivers testing, inspection and certification services, together with software products and advisory offerings, that support our customers’ product innovation and business growth. The UL Mark serves as a recognized symbol of trust in our customers’ products and reflects an unwavering commitment to advancing our safety mission. We help our customers innovate, launch new products and services, navigate global markets and complex supply chains, and grow sustainably and responsibly into the future. Our science is your advantage

• Conduct IT product security evaluation work activities based on scheme requirements, such as Common Criteria, Common.SECC etc.
• Perform customer site audit when needed: it requires travelling to customer premises.
• Investigate possible attack scenarios. Provide support for the penetration tester in charge of product testing – by interpreting the code review findings and compliance checking results, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• A degree (or equivalent) in information technology, cryptography, or computer science or equivalent proving your analytical skills and technical approach.
• Experience in Information Security, Testing Inspection Certification Industry, and Common Criteria evaluation experience is the best and ISO 27001 auditing will be an advantage.
• COMMON CRITERIA NETHERLANDS EVALUATOR (under NSCIB) Certified is an added advantage.
• Experience in evaluating/testing/developing Smartcard and similar devices: IC, SoC, MCU, and Embedded Software will be an advantage.
• Comfortable in analyzing various standards, frameworks, and regulations
• Will be able to demonstrate aptitude and a strong potential to learn quickly.
• High analytical skills, and attention to detail.
• Ability to work independently, to be innovative and creative.
• Ability to communicate with clarity and efficiency.
• Enjoys working in a team and engaging their colleagues.
• Comfortable in trying yourself in new areas without necessarily knowing everything and can figure out things as you go.
• Like working towards a larger goal and being willing to take the initiative into your own hands.Good at communicating and can convey messages to both technical and business audiences