Cybersecurity Evaluator (Security Evaluator)

About the role

SGS Brightsight, the world's largest independent security evaluation lab, is looking for a highly skilled, detail-oriented cybersecurity evaluator to join its Madrid team. You will work in a multidisciplinary team evaluating state-of-the-art network products (firewalls, routers, switches), security services (EDR, EPP, SIEM, IDS-IPS), operating systems and applications against international standards.

Key responsibilities

• Evaluate IT products according to international standards such as Common Criteria or LINCE
• Review and analyse security documentation, including policies, specifications and test plans
• Assess security functionality, vulnerability analysis and risk management practices
• Use testing tools, methodologies and frameworks to assess product security
• Prepare detailed evaluation reports with findings, analysis and recommendations
• Stay up to date on Common Criteria and security evaluation methods, and help improve evaluation processes and best practices
• Provide guidance and support to internal teams

Required profile

• Bachelor's or master's degree in a technical field (computer science, telecommunications, electronics, physics, mathematics)
• Strong analytical and problem-solving skills, attention to detail, and good organisational skills
• Ability to work independently and in a team, with English language skills
• Experience and focus on cybersecurity

Required skills

• Desired: cybersecurity tooling such as Nmap, Nessus, Wireshark, Burp, Scapy
• Desired: knowledge of ISO27001, Common Criteria, SESIP, PSA, CSA, LINCE, MEMEC, CICLON, NESAS, PCI
• Desired: experience in security evaluations, vulnerability assessments or penetration testing

What we offer

• Competitive salary based on experience and capabilities
• Complete training plans and a supportive, multicultural work environment
• The chance to work with major developers on their latest innovations