Product Penetration Tester

hitachi; Kraków; On-site; PLN 120,000 - 200,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Fitness programs

Employee Capital Plans (PPK)

Home office equipment / allowances

Free parking

Job summary

Hitachi Energy is seeking a skilled security researcher to join the Cybersecurity Assurance Center. You will perform penetration testing across hardware, software, cloud, and mobile products and work closely with engineers to implement security-by-design practices.

You will identify and exploit vulnerabilities to eliminate them before release, and develop advanced tools to support cryptography and reverse engineering efforts. This role is based in Krakow with global collaboration opportunities.

Qualifications

• In-depth knowledge of TCP/IP networking and application protocols concepts.
• Understanding of software exploitation and common vulnerabilities.
• Experience with port scanning, vulnerability assessment, and fuzzing tools.
• Knowledge of web protocols and OWASP Top 10/SANS 25 mitigations.
• Familiarity with security testing of mobile apps and related APIs.
• Proficiency in Python or other scripting languages.
• Experience with Metasploit and writing auxiliary modules.
• Hands-on reverse engineering and binary analysis experience is a plus.
• Experience with hardware exploitation techniques (firmware extraction, UART, JTAG, I2C) is a plus.

Responsibilities

• Penetration test Hitachi Energy products across hardware, software, cloud, and mobile.
• Identify and exploit vulnerabilities to eliminate them before release.
• Collaborate with engineers to implement security-by-design practices.
• Develop state-of-the-art security tools and contribute to cryptography efforts.

Skills

TCP/IP networking

Vulnerability assessment

Scripting (Python)

Reverse engineering

Metasploit

Hardware exploitation

Tools

Metasploit

Binary analysis tools

Job description

Location: Krakow, Lesser Poland, Poland

Job ID: R0137884

Date Posted: 2026-08-03

Company Name: HITACHI ENERGY SERVICES SP. Z O.O.

Profession (Job Category): Engineering & Science

Job Schedule: Full time

Remote: No

The opportunity

We are looking for a skilled security researcher to join Hitachi Energy Cybersecurity Assurance Center - our product security team that performs the penetration testing of every product we build. In this role you will:

• test every kind of product before release - hardware, software, cloud, mobile, OT solutions
• identify and exploit vulnerabilities across all Hitachi Energy products to eliminate them before releasing product to the market
• work closely with engineers to support security-by-design approach implementation
• use and develop the state-of-the art tools, both hardware and software, including CsAC's custom tools fine-tuned for cryptography and LLM-supported reverse engineering

How you'll make an impact

• In-depth knowledge of TCP/IP networking and application protocols concepts
• Understanding of software exploitation and common vulnerabilities
• Understanding of port scanning, vulnerability assessment and fuzzing tools
• Knowledge of protocols associated with web technologies
• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations
• Knowledge about security testing of mobile apps and related APIs
• Experience in working in multicultural environments
• Good English communication skills: verbal and writing of technical reports
• Knowledge of control communication protocols and technologies
• Proficient with one of the scripting languages (e.g., Python)
• Knowledge of cryptographic and security protocols
• Understanding of penetrating testing tools like Metasploit; able to write auxiliary modules and code exploits
• Hands-on experience with reverse engineering and binary analysis is a plus
• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus
• Understanding RF, Bluetooth, NFC and wireless attack surfaces is a plus

Your background

• Pentesting - performing penetration tests of wide range of systems
• Research - gathering information about industry technologies, familiarizing with new communication protocols and their weaknesses
• Documentation preparation - reports creation, team's internal documentation development
• Meetings - taking part in technical meetings and knowledge exchange sessions

More About Us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our benefits offering for this role generally includes:

• Private medical care and life insurance
• Access to fitness and wellness programs
• Access to benefits platform with discounts and perks
• Employee Capital Plans (PPK)
• Equipment for working from home or allowances for setting up a workplace at home
• Spectacles and contact lenses allowance
• Company events and team‑building activities
• Psychological support program
• Free parking available

Add if applicable

additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.

Accessibility and reasonable accommodation

Qualified individuals with a disability may request a reasonable accommodation if you are unable or limited in your ability to use or access the Hitachi Energy career site as a result of your disability. You may request reasonable accommodations by completing a general inquiry form on our website. Please include your contact information and specific details about your required accommodation to support you during the job application process.

This is solely for job seekers with disabilities requiring accessibility assistance or an accommodation in the job application process. Messages left for other purposes will not receive a response.

Use of Al and automated tools in recruitment

As part of our recruitment process, Hitachi Energy uses digital and automated tools, including Al-supported solutions, to assist with activities such as application screening, job matching, and interview scheduling. These tools are designed to support our recruiters and do not replace human decision-making. Candidate data is processed in accordance with applicable data protection and employment laws as well as Hitachi's Global Data Privacy Notice.

Background Screening and Security Checks

As part of the hiring process, Hitachi Energy conducts pre-employment background checks that may include verification of employment history, education, criminal records, and other relevant information, in accordance with applicable laws.

For certain roles—particularly those involving access to sensitive information, financial responsibilities, client data, regulated environments, or security-sensitive functions—additional or more comprehensive background or security screenings may be required. These may include, but are not limited to, enhanced criminal history checks, credit history reviews (where legally permissible), sanctions screening, or other due diligence measures aligned with the responsibilities of the position.

The scope and depth of any background or security review will be determined based on the nature of the role and business necessity, and will always be conducted in compliance with applicable federal, state, and local laws. Candidates will be notified and, where required, asked to provide consent prior to the initiation of any such checks.