Senior Cyber Security Analyst - IoT

Company: UL
Location: Glenview
Posted on: September 11, 2021

Job Description:

Thousands of us around the world wake up every day with a common purpose: to make the world a safer, more secure, and sustainable place. Science is in our DNA; we are endlessly curious and passionate about seeking and speaking the truth. We take delight in knowing that our work makes a meaningful contribution to society, and we are proud that our culture is centered on integrity, collaboration, inclusion, and excellence. UL stands at the forefront of technological advancement, and we are continually challenged to find new ways to foster innovation and positive change. Satisfying? Yes. Exciting? Absolutely!

As our global footprint continues to expand, we are looking for a Senior Security Analyst to join our lab in Northbrook.

The Senior Security Analyst will evaluate the security of network-connectable products and systems. This will include the analysis of products under evaluation, the development and the realization of high level penetration tests, the support and training of engineers for evaluation projects. The Senior Security Analyst also works on the security of software applications.

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations.
• Customer code review: due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
• Perform software penetration testing for evaluation with regards to reverse engineering (static and dynamic) and protocol attacks.
• Based on the code review a vulnerability analysis has to be carried out, to determine if the customer product has any potential security weaknesses.
• Investigate possible logical attack scenarios. Provide support for the security evaluation engineers in charge of product testing – by interpreting the code review findings, orienting the attack paths and analyzing the test results.
• Formal report writing in line with customer and certification scheme requirements.
• Delivery of customer projects on time.
• Develop sophisticated, state-of-the-art attacks with tools and scripts by maintaining a high level of expertise in the latest attack methods against embedded products.
• Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications and participating in professional societies and cross-departmental task forces.
• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.
• Performs other duties as directed by Team lead or manager to support the business.

• 3-5 years of directly related experience required
• Bachelor or University degree in a related discipline 
• Any experience with IEC 62443, UL 2900, or in automotive standards such as ISO 21434 is desirable
• Security related certifications is desirable but not mandatory: CISSP, OSCP, GPEN, OSCE, GXPN, CEH, Security+

• Mission: For UL, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply engrained in everything we do.  You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
• People: Ask any UL employee what they love most about working here, and you’ll almost always hear, “the people”. Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results.
• Interesting work: Your work at UL will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles,  you will get international experience working with colleagues around the world.
• Grow & achieve: Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.

Working at UL is an exciting journey that twists and turns daily. We thrive in the twists and revel in the turns. This is our every day. This is our normal.

Curious? To learn more about us and the work we do, visit our company page www.UL.com and division page ims.UL.com

Keywords: UL, Glenview , Senior Cyber Security Analyst - IoT, Other , Glenview, Illinois