Cybersecurity Testing Engineer
About the job
- A three-year or master's degree in Computer Science, Computer Engineering, Cybersecurity, or a related discipline.
- One to three years of experience in Vulnerability Assessment, Penetration Testing, Security Assessment, Secure Code Review, or analogous activities involving hardware/software products, web/mobile applications, network infrastructures, and IoT/IIoT devices.
- Experience with software development, testing, or validation for IoT/IIoT systems, web/mobile applications, or connected devices is an alternative qualification.
- In-depth knowledge of network protocols, operating systems, software architectures, and security configurations.
- Knowledge of IoT/IIoT technologies, architectures, and protocols.
- Knowledge of Secure Software Development Lifecycle practices.
- Familiarity with cybersecurity threat scenarios and known-vulnerability catalogs such as CVE, CWE, and CAPEC.
- Experience using security testing and assessment tools including Kali Linux, Wireshark, Burp Suite, OpenVAS, OWASP ZAP, Frida Toolkit, Apktool, or equivalent tools.
- Ability to read logs, troubleshoot, and technically analyze security problems.
- Good written and spoken English.
- Ability to work in multidisciplinary teams and collaborate effectively with auditors, developers, designers, and clients' technical contacts.
- Sensitivity to quality, testing, regulatory compliance, and product certification.
- Precision, operational autonomy, and focus on the quality of technical results.
- Perform technical cybersecurity tests to validate the robustness, reliability, and compliance of products against applicable regulatory and technical requirements.
- Perform security assessments, Vulnerability Assessments, and Penetration Tests on hardware/software products, web/mobile applications, network infrastructures, and IoT/IIoT devices.
- Analyze architectures, security configurations, communication protocols, and attack surfaces of connected systems and devices.
- Support secure code reviews and static and dynamic software analysis.
- Use security testing, vulnerability scanning, and traffic analysis tools to identify vulnerabilities and security weaknesses.
- Prepare technical reports on completed tests, documenting evidence, detected vulnerabilities, and any nonconformities.
- Collaborate with the Auditor team and clients' technical contacts on assessments, testing activities, and dedicated projects.
- Support evaluations against cybersecurity standards and frameworks applicable to connected products and IoT devices.
- Continuously update technical skills through training, study, and research into emerging threats, known vulnerabilities, and attack and defense techniques.
- Contribute to the ongoing development and improvement of the laboratory's cybersecurity testing and product security services.
- A university master's degree or specialization in cybersecurity.
- Technical cybersecurity certifications such as OSCP, CEH, CompTIA Security+, or GIAC.
- Knowledge of regulatory standards and frameworks applicable to connected devices and IoT products, such as EN 18031, ETSI EN 303 645, the Cyber Resilience Act, and RED.
About the company
Kiwa provides testing, inspection, and certification (TIC) services to ensure the safety and quality of products and systems that touch people's lives. It assesses and certifies components and processes across water, energy, construction, and manufacturing, using rigorous testing and inspection to award certification that proves compliance. Kiwa differentiates itself through its long history starting with water safety, a broad cross‑sector expertise, and global reach backed by SHV Holdings, which supports its growth and reliability. Its goal is to give customers and the public trust by confirming that products and services meet safety, quality, and regulatory standards.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Rijswijk, Netherlands
Founded
1948
Get referred to Kiwa
See people who can refer or advise you
Simplify's Take
What believers are saying
- Kiwa reported €1.7 billion revenue in 2025, up 14% with 5% organic growth.
- Kiwa signed a €1.3 billion CSA TIC acquisition on August 28, 2026.
- The 2026 Northern Europe deal spree adds Germany, Denmark, Finland, and Lithuania immediately.
What critics are saying
- CSA’s acquisition needs member approval and regulatory clearance before closing, delaying integration into 2027.
- UL Solutions, SGS, and DNV attack Kiwa’s margins with broader brands and deeper procurement reach.
- A shift to in-house AI compliance at OEMs compresses Kiwa’s core certification fees.
What makes Kiwa unique
- Kiwa’s 12,000 employees span 40 countries, combining TIC scale with local regulatory depth.
- Kiwa PVEL’s Product Qualification Program gives solar buyers failure-focused module reliability data.
- Sertio, PÜG, and Valcert deepen Kiwa’s EU medical-device and certification capabilities in 2026.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Hybrid Work Options
Paid Vacation
Paid Holidays
Life Insurance
Parental Leave
Sabbatical Leave
Commuter Benefits
Mental Health Support
Growth & Insights and Company News
6 month growth
↑ 31%1 year growth
↑ 31%2 year growth
↑ 31%Testaus- ja tarkastusyritys Kiwa has acquired Sertio, a Tampere-based in vitro diagnostics assessment company. Sertio operates as a notified body under the EU's IVDR regulation, evaluating medical devices for compliance before market entry. Kiwa is amongst the world's leading testing, inspection and certification companies. The acquisition strengthens Kiwa's position in the medical device assessment sector. Financial details of the transaction were not disclosed.
Kiwa PVEL, an independent solar photovoltaic module testing laboratory, has released a major update to its Product Qualification Program addressing rising field failures from spontaneous glass breakage and frame structural issues. The revised programme introduces test-to-failure protocols for static mechanical load and hail testing, with expanded sample sizes to better assess module durability. The new hail test increases samples to five modules and focuses on breakage-prone areas like edges and corners, escalating hail diameters until failure occurs. The update also introduces final stabilisation steps to address measurement uncertainty in n-type technologies, including light-soaking treatments after various stress tests. Additional changes include reduced sample sizes for light-induced degradation testing and streamlined UV-induced degradation sequencing. The updates aim to provide solar buyers with more robust reliability data as manufacturers pursue larger modules with thinner materials.
The total number of Top Performers remains steady, but failures have increasedNAPA, Calif., June 4, 2025 /PRNewswire/ -- Kiwa PVEL, the independent lab for quality and reliability testing of solar photovoltaic (PV) modules, today announced the publication of its 11th annual PV Module Reliability Scorecard. This digital resource provides solar industry stakeholders with testing insights gained from Kiwa PVEL's flagship Product Qualification Program (PQP). The PQP is a comprehensive suite of extended reliability and performance tests that evaluate solar modules under a wide range of environmental and mechanical conditions—including the effects of extreme temperatures and high humidity, as well as the impacts of mechanical stress, hail and ultraviolet light
Kiwa PVEL releases 11th edition of the PV Module Reliability Scorecard.
Kiwa Watertec confirmed as Silver Sponsor for BMA Connect Conference 2025.