Product Penetration Tester

Hitachi, Ltd.; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Fitness programs

Home office equipment

Company events

Job summary

Hitachi Energy is seeking a skilled security researcher to join our Cybersecurity Assurance Center. You will test products before release, identify vulnerabilities, and collaborate with engineers to implement security-by-design across hardware, software, cloud, and OT solutions.

Responsibilities include using advanced tools, writing exploit modules, and performing reverse engineering. Strong English communication and hands-on experience in security testing are essential for success.

Qualifications

• In-depth knowledge of TCP/IP networking and application protocols concepts.

Responsibilities

• Penetration testing of wide range of systems.
• Research on industry technologies and protocol weaknesses.
• Documentation preparation and creating internal docs.
• Participation in technical meetings and knowledge exchange sessions.

Skills

TCP/IP

Port scanning

Fuzzing tools

Web protocols

OWASP Top 10

Mobile security

English communication

Python scripting

Cryptographic protocols

Reverse engineering

Firmware extraction

UART/JTAG/I2C interfacing

RF/Bluetooth/NFC

Penetration testing

Documentation

Tools

Metasploit

Job description

The opportunity

We are looking for a skilled security researcher to join Hitachi Energy Cybersecurity Assurance Center - our product security team that performs the penetration testing of every product we build. In this role you will:
- test every kind of product before release - hardware, software, cloud, mobile, OT solutions
- identify and exploit vulnerabilities across all Hitachi Energy products to eliminate them before releasing product to the market
- work closely with engineers to support security-by-design approach implementation
- use and develop the state-of-the art tools, both hardware and software, including CsAC's custom tools fine-tuned for cryptography and LLM-supported reverse engineering

How you'll make an impact

• In-depth knowledge of TCP/IP networking and application protocols concepts

• Understanding of software exploitation and common vulnerabilities

• Understanding of port scanning, vulnerability assessment and fuzzing tools

• Knowledge of protocols associated with web technologies

• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations

• Knowledge about security testing of mobile apps and related APIs

• Experience in working in multicultural environments

• Good English communication skills: verbal and writing of technical reports

• Knowledge of control communication protocols and technologies

• Proficient with one of the scripting languages (e.g., Python)

• Knowledge of cryptographic and security protocols

• Understanding of penetrating testing tools like Metasploit; able to write auxiliary modules and code exploits

• Hands-on experience with reverse engineering and binary analysis is a plus

• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus

• Understanding RF, Bluetooth, NFC and wireless attack surfaces is a plus

Your background

• Pentesting - performing penetration tests of wide range of systems

• Research - gathering information about industry technologies, familiarizing with new communication protocols and their weaknesses

• Documentation preparation - reports creation, team's internal documentation development

• Meetings - taking part in technical meetings and knowledge exchange sessions

More About Us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our benefits offering for this role generally includes:

• Private medical care and life insurance

• Access to fitness and wellness programs

• Access to benefits platform with discounts and perks

• Employee Capital Plans (PPK)

• Equipment for working from home or allowances for setting up a workplace at home

• Spectacles and contact lenses allowance

• Company events and team-building activities

• Psychological support program

• Free parking available

Add if applicable: additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.