Product Penetration Tester

Hitachi Vantara Corporation; Kraków; On-site; PLN 120,000 - 230,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Fitness programs

Equipment for working from home / home

Company events

Job summary

Hitachi Energy is seeking a skilled security researcher to join our Cybersecurity Assurance Center. You will perform penetration tests across hardware, software, cloud, mobile, and OT solutions, and identify vulnerabilities to eliminate them before market release.

You will work closely with engineers to implement security-by-design practices and develop tools optimized for cryptography and LLM-assisted reverse engineering, contributing to a secure product lifecycle.

Qualifications

• Pentesting - performing penetration tests of wide range of systems.
• Research - gathering information about industry technologies and protocols.
• Documentation preparation - reports creation and internal documentation development.
• Meetings - participating in technical meetings and knowledge exchange sessions.

Responsibilities

• Test every kind of product before release: hardware, software, cloud, mobile, OT solutions.
• Identify and exploit vulnerabilities across Hitachi Energy products to eliminate them before release.
• Collaborate with engineers to implement security-by-design approaches.
• Use and develop state-of-the-art tools, including CsAC's custom tools fine-tuned for cryptography and LLM-supported reverse engineering.

Skills

Pentesting

Research

Documentation

Meetings

English communication

Tools

Metasploit

LLM-assisted tooling

Job description

About Us

Job Description:

The opportunity

We are looking for a skilled security researcher to join Hitachi Energy Cybersecurity Assurance Center - our product security team that performs the penetration testing of every product we build. In this role you will: - test every kind of product before release - hardware, software, cloud, mobile, OT solutions - identify and exploit vulnerabilities across all Hitachi Energy products to eliminate them before releasing product to the market - work closely with engineers to support security-by-design approach implementation - use and develop the state-of-the art tools, both hardware and software, including CsAC's custom tools fine-tuned for cryptography and LLM-supported reverse engineering

How you'll make an impact

• In-depth knowledge of TCP/IP networking and application protocols concepts
• Understanding of software exploitation and common vulnerabilities
• Understanding of port scanning, vulnerability assessment and fuzzing tools
• Knowledge of protocols associated with web technologies
• Understanding of OWASP Top 10 and SANS 25 vulnerabilities and their mitigations
• Knowledge about security testing of mobile apps and related APIs
• Experience in working in multicultural environments
• Good English communication skills: verbal and writing of technical reports
• Knowledge of control communication protocols and technologies
• Proficient with one of the scripting languages (e.g., Python)
• Knowledge of cryptographic and security protocols
• Understanding of penetrating testing tools like Metasploit; able to write auxiliary modules and code exploits
• Hands-on experience with reverse engineering and binary analysis is a plus
• Experience with hardware exploitation techniques including firmware extraction, UART, JTAG, I2C interfacing is a plus
• Understanding RF, Bluetooth, NFC and wireless attack surfaces is a plus

Your background

• Pentesting - performing penetration tests of wide range of systems
• Research - gathering information about industry technologies, familiarizing with new communication protocols and their weaknesses
• Documentation preparation - reports creation, team's internal documentation development
• Meetings - taking part in technical meetings and knowledge exchange sessions

More About Us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our benefits offering for this role generally includes:

• Private medical care and life insurance
• Access to fitness and wellness programs
• Access to benefits platform with discounts and perks
• Employee Capital Plans (PPK)
• Equipment for working from home or allowances for setting up a workplace at home
• Spectacles and contact lenses allowance
• Company events and team‑building activities
• Psychological support program
• Free parking available

Add if applicable: additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.

Accessibility and reasonable accommodation

Qualified individuals with a disability may request a reasonable accommodation if you are unable or limited in your ability to use or access the Hitachi Energy career site as a result of your disability. You may request reasonable accommodations by completing a general inquiry form on our website. Please include your contact information and specific details about your required accommodation to support you during the job application process.

This is solely for job seekers with disabilities requiring accessibility assistance or an accommodation in the job application process. Messages left for other purposes will not receive a response.

Use of Al and automated tools in recruitment

As part of our recruitment process, Hitachi Energy uses digital and automated tools, including Al-supported solutions, to assist with activities such as application screening, job matching, and interview scheduling. These tools are designed to support our recruiters and do not replace human decision-making. Candidate data is processed in accordance with applicable data protection and employment laws as well as Hitachi's Global Data Privacy Notice.

Background Screening and Security Checks

As part of the hiring process, Hitachi Energy conducts pre-employment background checks that may include verification of employment history, education, criminal records, and other relevant information, in accordance with applicable laws.

For certain roles—particularly those involving access to sensitive information, financial responsibilities, client data, regulated environments, or security-sensitive functions—additional or more comprehensive background or security screenings may be required. These may include, but are not limited to, enhanced criminal history checks, credit history reviews (where legally permissible), sanctions screening, or other due diligence measures aligned with the responsibilities of the position.

The scope and depth of any background or security review will be determined based on the nature of the role and business necessity, and will always be conducted in compliance with applicable federal, state, and local laws. Candidates will be notified and, where required, asked to provide consent prior to the initiation of any such checks.