Analityk ds. Zarządzania Podatnościami (k/m)

P.T.H. EUROTRONIC Sp. z o.o. is a Polish company with over 40 years of tradition, operating continuously since 1984. The team consists of experienced designers, programmers, and sales specialists working on modern solutions for industry, automation, and IT. The company designs and manufactures advanced measuring instruments, electronic devices, and comprehensive industrial automation sets. They also provide technical consulting, computer equipment servicing, and develop dedicated software for electronics.

• Education in Computer Science, Software Engineering, Electronics, or related fields
• Documented practical experience in similar positions
• Good knowledge of Linux system
• Programming skills in C, C++, Python, and shell scripting
• Knowledge of basic types of vulnerabilities in applications written in C and C++
• Familiarity with version control systems GIT and SVN
• English language proficiency sufficient for technical communication

Nice to have:

• Knowledge of LUA language
• Knowledge of CVE and CVSS standards
• Knowledge of vulnerabilities in web applications
• Familiarity with embedded and industrial systems
• Experience with debugging tools (GDB, strace, Valgrind, etc.)
• Experience building and configuring Linux systems on embedded devices using Buildroot
• Communication skills and ability to work in a team
• Experience testing systems based on large language models (LLM)

• Analyze new vulnerabilities from the CVE database to assess if they affect company-produced devices and develop methods to eliminate them
• Perform backports of security patches
• Create security reports for clients
• Develop internal tools supporting analysts' work
• Work in the area of industrial devices, mainly energy sector: automation of energy stations, RTU, disturbance recorders, etc.

According to Article 13 of the EU GDPR (2016/679), the data controller is P.T.H. EUROTRONIC Sp. z o.o. based in Poznań. Personal data is processed for recruitment purposes and stored for the duration of the recruitment process plus 12 months if consent is given. Candidates have rights to access, rectify, delete, restrict processing, data portability, objection, and to file complaints with the data protection authority. Providing personal data is voluntary but necessary for recruitment. Data will not be profiled or transferred to third countries or international organizations. Data may be shared with authorized bodies or contracted service providers.