Product Security Consultant
Job Description
Product Security Consultant - United States
Imagine your customer is a leading industrial component manufacturer, specializing in top-notch manufacturing and transportation equipment. You have ambitious goals: to streamline processes, ensure top-quality certifications for your client’s products, and guarantee cybersecurity. That’s where you come in. Our analysis will bridge any gaps in processes and products, and you will stand by your client as you address these challenges. With our expertise in penetration testing, risk assessment, and independent security evaluation, you will assist your client in raising their cyber resilience like never before. Your success story? It's written in the certification. Now also imagine the same story, but for products such as vehicles, medical devices, ships, IoT products, network equipment, etc. Doesn’t it sound like an exciting mission?
Bureau Veritas Cybersecurity provides cybersecurity testing, audit, training and certification services covering people, organization, and technology (networks, systems, applications and data). We have offices in Seattle and Boston but are also expanding our team across the globe. That’s why we are looking for a Product Security Consultant.
We have reputable clients and they request expertise to increase their level of cybersecurity. You will be responsible for conducting threat modeling, risk assessments and audits. You will also give advice, training, and support in the areas of cybersecurity, and relevant cybersecurity standards. You will collaborate with companies such as industrial manufacturers and asset owners, vehicle manufacturers and system integrators.
AS OUR PRODUCT SECURITY CONSULTANT YOU WILL:
- Manage and conduct advisory assignments in the field of cybersecurity and compliance, covering areas such as industrial cybersecurity but also automotive, medical/healthcare and IoT.
- Guide and conduct evaluations based on recognized control frameworks or specific frameworks used by Bureau Veritas Cybersecurity, such as gap assessments, security maturity assessments, threat modeling and risk assessments.
- Assist organizations in implementing ISMS and CSMS in accordance with relevant standards.
- Actively contribute to the development of knowledge and services.
- Support key clients with coordination across multiple stakeholders (internal experts, certification bodies) helping manage timelines and ensuring deliverables are aligned across projects.
- Support key clients in tracking remediation actions and validating that security controls are effectively implemented over time.
If you have the ambition to become a specialist in a specific domain within cybersecurity, we certainly provide opportunities within Bureau Veritas Cybersecurity to realize that ambition. We encourage knowledge sharing through our Centers of Excellence.
If you would like to build a team and to coach junior and mid-level consultants; with our ambition to grow we can make it happen together with you.
YOU RECOGNIZE YOURSELF IN THE FOLLOWING:
- Several years of experience in the field of cybersecurity, with a specific focus on the cybersecurity of embedded products.
- Knowledge of product cybersecurity concepts, with a particular focus on industrial products, but also covering automotive, medical, network, IoT, etc.
- Knowledge of various laws and regulations related to cyber and information security, as well as the current developments in this area.
- Knowledge and expertise on certifications, mainly IEC 62443
- Familiarity with relevant cybersecurity frameworks, certification schemes, and regulations such as NIST, CMMC, Common Criteria, and the EU Cyber Resilience Act (CRA), and the ability to apply them in product security or compliance contexts is a plus.
- Strong verbal and written communication skills in English.
- A results-oriented personality; you know how to engage clients and colleagues.
- Availability to travel (international) if needed in order to meet customers.
WHAT CAN YOU EXPECT FROM US?
- We are an organization with a strong focus on technical cybersecurity, delivering high-quality technical services in the field of digital security. You will be part of a team of motivated international specialists, where knowledge exchange is highly valued.
- At Bureau Veritas Cybersecurity, we provide an environment for you to develop your talents and stimulate your professional growth. Together, we work to safeguard the security and integrity of valuable data while facing the challenges of the ever-evolving digital world.
- Bureau Veritas Cybersecurity is a fast-growing company with ambitious goals. You will have the opportunity to grow along with us and shape your career allowing you to become an expert in your field.
- In terms of content, we offer you a diverse portfolio of exciting clients and projects. We are part of Bureau Veritas, which means that international opportunities are expanding, both for project work and for advancing your career.
ARE YOU THE PRODUCT SECURITY CONSULTANT WE ARE LOOKING FOR?
We would love to hear from you. Do you have questions or do you want to submit your CV? You can reach us through [email protected]
📌 Note: Pre-employment screening, including a Certificate of Conduct (VOG), and assessment are part of the recruitment process.