At UL, we know why we come to work.

The Cyber Security Advisor will evaluate the security of network-connectable devices, products, and industrial equipment systems. This will include the analysis of products under evaluation, the development and the realization of high-level penetration tests, the support and training of engineers for evaluation projects. The Cyber Security Analyst also works on the security of software applications.

Working on connected technologies Industrial OT/IIoT, IoT using the security framework, testing and certification as per IEC-62443, UL-2900, ETSI EN 303645 standards within several unique ecosystems including Smart homes, Smart buildings, Smart healthcare, Smart mobility/ automotive, Smart Cities, Smart Manufacturing -Industry4.0, Factory automation, Autonomous systems.

What You’ll Learn & Achieve

The ideal OT candidate shall possess an understanding of OT fundamentals and best cybersecurity practices.
Shall be able to provide personalized guidance and support to customers, considering project planning, training, assessment, documentation, and implementation.
Support IEC 62443 certification of components, products, and systems.
Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations, delivering projects within the expected time.
Pro-actively identifies relevant industry trends and drive knowledge / expertise development in this domain, by coaching colleagues and taking ownership of activities to increase customer awareness of UL (including papers, articles, conference attendance).
Customer code review due to stringent confidentiality and security requirements, it often requires traveling to customer premises.
Perform software penetration testing for evaluation with regards to reverse engineering (static and dynamic) and protocol attacks.
Based on the code review a vulnerability analysis must be carried out, to determine if the customer product has any potential security weaknesses.
Investigate possible logical attack scenarios. Provide support for the security evaluation engineers in charge of product testing – by interpreting the code review findings, orienting the attack paths, and analyzing the test results.
Formal report writing in line with customer and certification scheme requirements.
Develop sophisticated, state-of-the-art attacks with tools and scripts by maintaining a high level of expertise in the latest attack methods against embedded products.
Maintain/improve technical knowledge by attending educational workshops, reviewing professional publications, obtaining applicable certifications, and participating in professional societies and cross-departmental task forces.
Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.

What Makes You a Great Fit

At least 3-5 years of relevant work experience.
Experience with IEC 62443 standard, DCS/ICS/SCADA/PLC/OT Protocols/OT security.
Have proven experience in customer facing advisory services (project and delivery), expertise and in-depth knowledge of product testing and certification methodologies.
Have a major competency in one cybersecurity domain (Risk Management, Asset Security, Network Security, Identity & Access Management etc.) and have minor competencies in other cybersecurity solutions.
Have strong communication skills and the ability to quickly adapt to various technical and organizational environments.
Be resilient and have collaborative profile, being able to coach other team members, share knowledge and work in various teams at the same time
Have a proven history of responsibility, accuracy, and attention to details.
Understands the importance of addressing customer needs.
Detailed knowledge of industry issues, needs, and problems.
Experience protecting or implementing OT technology in critical infrastructure and key resource sectors such as Energy, Water, Oil & Gas, Maritime, Aviation, Healthcare, Transportation or Telecommunications.
Be able to travel internationally.

UL has COVID-19 protocols and policies in place to ensure the safety of our employees, customers and clients. Effective November 1, 2021, the company mandates that employees are vaccinated against COVID-19 as a condition of employment (except where prohibited by law), subject to reasonable accommodation as required by law.

What You’ll Experience Working At UL

Mission For UL, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply engrained in everything we do. You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
People Ask any UL employee what they love most about working here, and you’ll almost always hear, “the people”. Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results.
Interesting work Your work at UL will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles, you will get international experience working with colleagues around the world.
Grow & achieve Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.

Learn More

Working at UL is an exciting journey that twists and turns daily. We thrive in the twists and revel in the turns. This is our every day. This is our normal.

Curious? To learn more about us and the work we do, visit our company page www.UL.com

UL

New Jobs

Cybersecurity Advisor – ICS/OT and IIoT (remote in NA)