Cybersecurity Product Penetration Tester

Hitachi Energy; Kraków; On-site; PLN 55,000 - 75,000; Full time

Job summary

Hitachi Energy in Kraków is seeking a skilled security researcher to join their Cybersecurity Assurance Center. In this role, you will conduct penetration testing across multiple product types including hardware, software, and cloud solutions to identify vulnerabilities before market release.

Ideal candidates will possess strong knowledge in TCP/IP, software exploitation, and scripting languages, along with proficiency in tools like Metasploit. A collaborative work environment with communication skills in English is essential.

Qualifications

• Pentesting experience with a wide range of systems.
• Ability to document technical findings and reports.
• Experience in multicultural environments.

Responsibilities

• Perform penetration testing on various products.
• Identify and exploit vulnerabilities across all products.
• Support engineers in implementing security-by-design.

Skills

In-depth knowledge of TCP/IP networking

Understanding of software exploitation

Knowledge of web technologies protocols

Good English communication skills

Proficient with scripting languages (e.g., Python)

Knowledge of cryptographic protocols

Tools

Metasploit

Fuzzing tools

TCP/IP tools

Job description

Role

We are looking for a skilled security researcher to join Hitachi Energy Cybersecurity Assurance Center – our product security team that performs the penetration testing of every product we build. In this role you will:

• Test every kind of product before release – hardware, software, cloud, mobile, OT solutions
• Identify and exploit vulnerabilities across all Hitachi Energy products to eliminate them before releasing product to the market
• Work closely with engineers to support security‑by‑design approach implementation
• Use and develop the state‑of‑the‑art tools, both hardware and software, including CsAC's custom tools fine‑tuned for cryptography and LLM‑supported reverse engineering

How You’ll Make an Impact

• In‑depth knowledge of TCP/IP networking and application protocols concepts
• Understanding of software exploitation and common vulnerabilities
• Understanding of port scanning, vulnerability assessment and fuzzing tools
• Knowledge of protocols associated with web technologies
• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations
• Knowledge about security testing of mobile apps and related APIs
• Experience in working in multicultural environments
• Good English communication skills: verbal and writing technical reports
• Knowledge of control communication protocols and technologies
• Proficient with one of the scripting languages (e.g., Python)
• Knowledge of cryptographic and security protocols
• Understanding of penetration testing tools like Metasploit; able to write auxiliary modules and code exploits
• Hands‑on experience with reverse engineering and binary analysis is a plus
• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus
• Understanding RF, Bluetooth, NFC and wireless attack surfaces is a plus

Your background

• Pentesting – performing penetration tests of a wide range of systems
• Research – gathering information about industry technologies, familiarizing with new communication protocols and their weaknesses
• Documentation preparation – reports creation, team's internal documentation developmentMeetings – taking part in technical meetings and knowledge exchange sessions

Location requirements

Applicable only for Poland location align with local law regulations