Product Security Researcher & Penetration Tester

hitachi; Kraków; On-site; PLN 120,000 - 200,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Fitness programs

Employee Capital Plans (PPK)

Home office equipment / allowances

Free parking

Job summary

Hitachi Energy is seeking a skilled security researcher to join the Cybersecurity Assurance Center. You will perform penetration testing across hardware, software, cloud, and mobile products and work closely with engineers to implement security-by-design practices.

You will identify and exploit vulnerabilities to eliminate them before release, and develop advanced tools to support cryptography and reverse engineering efforts. This role is based in Krakow with global collaboration opportunities.

Qualifications

• In-depth knowledge of TCP/IP networking and application protocols concepts.
• Understanding of software exploitation and common vulnerabilities.
• Experience with port scanning, vulnerability assessment, and fuzzing tools.
• Knowledge of web protocols and OWASP Top 10/SANS 25 mitigations.
• Familiarity with security testing of mobile apps and related APIs.
• Proficiency in Python or other scripting languages.
• Experience with Metasploit and writing auxiliary modules.
• Hands-on reverse engineering and binary analysis experience is a plus.
• Experience with hardware exploitation techniques (firmware extraction, UART, JTAG, I2C) is a plus.

Responsibilities

• Penetration test Hitachi Energy products across hardware, software, cloud, and mobile.
• Identify and exploit vulnerabilities to eliminate them before release.
• Collaborate with engineers to implement security-by-design practices.
• Develop state-of-the-art security tools and contribute to cryptography efforts.

Skills

TCP/IP networking

Vulnerability assessment

Scripting (Python)

Reverse engineering

Metasploit

Hardware exploitation

Tools

Metasploit

Binary analysis tools

Job description

Hitachi Energy is seeking a skilled security researcher to join the Cybersecurity Assurance Center. You will perform penetration testing across hardware, software, cloud, and mobile products and work closely with engineers to implement security-by-design practices.

You will identify and exploit vulnerabilities to eliminate them before release, and develop advanced tools to support cryptography and reverse engineering efforts. This role is based in Krakow with global collaboration opportunities.