Project Leader, Privacy Testing
Are you concerned that tech companies have too much power to shape people’s lives? That the most powerful business models today are based on extracting people's data without their understanding, consent or control? And that companies are not keeping pace with the emerging harms posed by their products and services? If you think we all deserve better and want to put your skills to work for the good guys, then we want you to help build our new Digital Lab.
For over 80 years, people have trusted Consumer Reports to advocate for their interests and help them make informed choices. Today, we're inviting you on new mission: to make sure there are rules for fair conduct in the digital marketplace, and that they’re set in consumers’ favor. To make sure people can live their lives without being forced to sacrifice their privacy. And to make sure people can trust that their devices and data are secure.
We're looking for technologists, activists, lawyers, economists and entrepreneurs who share our drive to build consumer power in the 21st century. With your help, we’ll lead a new movement to restore choice and control to our digital lives. Learn more at http://lab.cr.org.
- Plans, coordinates and oversees test projects for connected devices, apps, and software.
- Implements testing protocols and ensures proper implementation.
- Knowledge of test methodologies, equipment and protocols
- Ensures that test data meet established standards for accuracy, repeatability, reproducibility and dependability.
- Designs and helps to build test equipment and develops methods to accomplish goals defined by test protocols as required.
- Prepares preliminary test project protocols.
- Evaluates and recommends improvements to existing test procedures.
- Actively participates as a member of a product testing and content team, conferring with other team members as necessary to ensure objectives for quality and timeliness are met.
- Ensures quality of test projects and strives for continuous quality improvement by celebrating successes and reducing errors.
- Ensures maintenance and calibration of lab equipment.
- Ensures ratings are delivered accurately and within established deadlines.
- Interacts with manufacturers and retailers as necessary.
- Bachelor of Science degree in Electrical Engineering, Computer Science, or equivalent, with a minimum of 3-5 years’ experience in cybersecurity development and testing with Internet connected devices, mobile apps, and software. Master's degree preferred.
- Proficiency in using spreadsheet software.
- Written and verbal skills to clearly and accurately report test methods and results as well as explain them in a way that is understandable by content creators who are not technically knowledgeable.
- Thorough understanding of and experience with:
- home-router-based wired (Ethernet) and wireless (802.11x Wi-Fi with encryption) IP networking, router settings and features, and LAN architecture
- DHCP and commonly-used IP protocols and packet types for both general-purpose computing and Internet of Things (IoT) communications
- WAN communications standards common to home networks and consumer-level Internet Service Providers (ISPs)
- Tools for monitoring, logging and analyzing networks (Ex: Wireshark, Burpsuite, WiFi Pineapple, etc.)
- Tools for penetration testing (Ex. Metasploit, SSL Strip, Bettercap, Kali Linux, etc.)
- Tools for monitoring and analyzing privacy and security on mobile (e.g. Lumen, Android Studio, Frida, Ida)
- Best-practice principles for keeping personal communications secure from unauthorized monitoring
- Installation of desktop software on the Windows and Mac OS platforms
- Installation of mobile apps on the Android, iOS and Windows platforms
- Additionally, candidates should:
- Have a keen interest in analyzing network communications and seeking out weaknesses in security and privacy of home networks in general and of connected devices and the software installed on them.
- Be self-motivated to go beyond the minimum requirements of the assigned work to discover unanticipated vulnerabilities and security flaws that may affect the privacy of consumers.
Back to top