Lead Product Security Penetration Tester

Hitachi; Poland; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Private medical care

Fitness programs

Discounts platform

PPK

Home office equipment

Eye care allowance

Company events

Counseling program

Free parking

Job summary

Hitachi Energy Services SP. Z O.O. in Krakow is seeking a security researcher to join the Cybersecurity Assurance Center. You will perform penetration testing across hardware, software, cloud, mobile, and OT products, and identify vulnerabilities before release.

Work with engineers to embed security-by-design, develop and use advanced tools including custom cryptography and reverse engineering capabilities, and communicate findings in clear technical reports.

Qualifications

• Experience in security testing across hardware, software, cloud, mobile and OT systems.
• Knowledge of TCP/IP, web protocols and OWASP Top 10.
• Ability to develop exploits and write software modules.
• Familiarity with hardware security testing including firmware analysis.

Responsibilities

• Test Hitachi Energy products before release (hardware, software, cloud, mobile, OT).
• Identify and exploit vulnerabilities to eliminate them pre-market.
• Collaborate with engineers to implement security-by-design.
• Develop and use advanced tools, including cryptography-focused and reverse engineering tools.

Skills

Penetration testing

Security research

TCP/IP networking

Exploit development

Reverse engineering

Python scripting

Mobile app security

Hardware security

Tools

Metasploit

Binary analysis

Firmware extraction

Fuzzing tools

Job description

Hitachi Energy Services SP. Z O.O. in Krakow is seeking a security researcher to join the Cybersecurity Assurance Center. You will perform penetration testing across hardware, software, cloud, mobile, and OT products, and identify vulnerabilities before release.

Work with engineers to embed security-by-design, develop and use advanced tools including custom cryptography and reverse engineering capabilities, and communicate findings in clear technical reports.