Senior Penetration Tester - Embedded/Web Security Lead

Schneider Electric; Grenoble; Sur place; EUR 80 000 - 120 000; Plein temps

Avantages offerts par ce poste

Health insurance

Paid time off

Family leave

Teleworking options

Retirement plans

Employee share ownership

Profit sharing

Learning platforms

Résumé du poste

Schneider Electric is seeking a Senior Penetration Tester based in Grenoble, France, to assess embedded, web and desktop applications. You will identify vulnerabilities with Burp, Nmap, Wireshark, OWASP ZAP and Kali and communicate findings to product teams.

You will also engage in reverse engineering and exploit development while reinforcing security awareness across global product lines and stakeholders.

Qualifications

• 4+ years of experience in application and/or embedded penetration testing.
• Strong expertise with Burp, Nmap, Wireshark, OWASP ZAP and Kali.
• Experience in reverse engineering and exploit development.
• Knowledge of memory corruption, Use-After-Free and race conditions.

Responsabilités

• Perform penetration testing across embedded, web and thick client applications.
• Identify vulnerabilities using advanced tools and research-driven techniques.
• Conduct reverse engineering and dynamic analysis.
• Deliver clear reports, proofs of concept and stakeholder communication.
• Drive security awareness and advisory for product teams.
• Work across multiple technologies and cybersecurity domains within Schneider Electric offers.

Connaissances

C

C++

Java

.NET

Reverse engineering

Exploit development

Memory corruption

Use-After-Free

Dynamic analysis

Windows

Linux

Outils

Burp

Nmap

Wireshark

OWASP ZAP

Kali

Description du poste

Schneider Electric is seeking a Senior Penetration Tester based in Grenoble, France, to assess embedded, web and desktop applications. You will identify vulnerabilities with Burp, Nmap, Wireshark, OWASP ZAP and Kali and communicate findings to product teams.

You will also engage in reverse engineering and exploit development while reinforcing security awareness across global product lines and stakeholders.