Great that you’re thinking about a career with BSI!
Job Title: Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)
Location: Hemel Hempstead, Hertfordshire
Job Type: Full-time, Permanent (36 hours/week)
Overview
Are you a cybersecurity expert passionate about securing connected products in a rapidly evolving digital landscape?
We’re looking for a Subject Matter Expert (SME) – Product Cybersecurity to lead compliance testing and evaluation of connected consumer, industrial, and medical devices. This is a pivotal technical leadership role, combining hands-on testing, standards interpretation, and strategic guidance to support clients and influence the global security of IoT technologies.
You’ll be at the forefront of emerging cybersecurity regulations and connected product risks, helping clients bring secure products to market and contributing to BSI’s growing reputation as a global authority in product cybersecurity assurance.

What You’ll Be Doing

• Act as BSI’s technical authority for product cybersecurity compliance.
• Lead and support cybersecurity testing of IoT products across consumer, industrial, and healthcare sectors.
• Provide expert interpretation of standards including ETSI EN 303 645, ETSI TS 103 701, IEC 62443, UL 2900, and OWASP.
• Develop and improve test methods, tools, and automated reporting processes for the IoT lab.
• Guide internal teams and clients through security evaluations, results interpretation, and resolution of compliance issues.
• Research and evaluate new test equipment and methodologies for advanced threat simulation and analysis.
• Maintain CREST CPSA or equivalent technical certification.
• Ensure timely testing and reporting aligned with operational KPIs and accreditation requirements.

Key Skills & Experience

Required:

• 5+ years of hands-on hardware cybersecurity testing (IoT/connected devices).
• Expertise in global IoT cybersecurity standards and compliance practices.
• Strong understanding of microcontrollers (e.g. STM32, ESP32), RTOS, and wireless protocols (Zigbee, Bluetooth, Wi-Fi, Cellular, LoRa WAN).
• Skilled in interfaces like UART, JTAG, SPI, I2C for debugging.
• Proficiency with tools such as Nmap, Burp Suite, Wireshark, Nessus.
• Strong programming foundation (Python, C/C++, Java, etc.).
• Bachelor’s degree in Cybersecurity, Computer/Electrical/Electronic Engineering, Telecommunications or IT.

Preferred:

• Previous experience as a Product Cybersecurity SME within the TIC (Testing, Inspection, Certification) industry.
• Familiarity with custom-built firmware/hardware and IoT architecture principles.
• CREST CPSA or equivalent qualification (or willingness to obtain).

Why Join Us?

At BSI, you’ll have the opportunity to:

• Influence cybersecurity practices across global industries.
• Work with cutting-edge connected technologies and security testing methods.
• Be part of an internationally recognised certification body trusted by top brands.
• Contribute to the development of new compliance standards and thought leadership in the IoT space.

BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training, and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Income Protection & Life Assurance.
Make a real impact in securing the connected world.
Apply now or reach out to our team to learn more.
D&I Policy
BSI is committed to ensuring the diversity of our workforce reflects that of our clients and the communities in which we operate. Our goal is to create a sense of belonging for all employees by providing opportunities to develop, grow, and engage with our global organization all while having fun doing great work. BSI is a community where everyone can thrive.
If you require any reasonable accommodation to be made on account of a disability or impairment throughout our recruiting process, please inform your Talent Acquisition Partner.

LI-GC1

Our Excellence Behaviours: Client-centric, Agile, Collaborative. These three behaviours represent how we do things at BSI. They help us ensure that BSI is a great place to work and a highly successful business.
BSI is conducting face-to-face interviews where appropriate and possible. If you are invited to a face-to-face interview but feel more comfortable with conducting the interview virtually, please speak to a member of our recruitment team

• Act as BSI’s technical authority for product cybersecurity compliance.
• Lead and support cybersecurity testing of IoT products across consumer, industrial, and healthcare sectors.
• Provide expert interpretation of standards including ETSI EN 303 645, ETSI TS 103 701, IEC 62443, UL 2900, and OWASP.
• Develop and improve test methods, tools, and automated reporting processes for the IoT lab.
• Guide internal teams and clients through security evaluations, results interpretation, and resolution of compliance issues.
• Research and evaluate new test equipment and methodologies for advanced threat simulation and analysis.
• Maintain CREST CPSA or equivalent technical certification.
• Ensure timely testing and reporting aligned with operational KPIs and accreditation requirements